CC @agl @FiloSottile

I wonder if this is a good time to discuss how the crypto package could be adapted (in Go 2?) in order to make additional algorithms available via plugins?

0 is the value of UnknownPublicKeyAlgorithm. https://godoc.org/crypto/x509#PublicKeyAlgorithm

Are you suggesting adding GOST values to PublicKeyAlgorithm, just so you can detect GOST certificates while still getting PublicKey = nil, or adding full support for GOST public keys? The former can be a problem if someone is checking for UnknownPublicKeyAlgorithm before blindly using the public key. The latter is much wider and unlikely, since there is no GOST code anywhere in the stdlib or x/crypto, and very little demand.

@jeffallen There is precedent with hash functions, but it seemed to always cause more trouble than it's worth. Personally I'd rather make sure stdlib packages are decoupled enough to allow forks to be easily plugged in, allowing more than just adding algorithms without a sprawling plugin interface.

OpenSSL knows about these algorithms even without ability to use it (with disabled GOST engine).

Yes, I suggest to add values to PublicKeyAlgorithm. And it would be even better to add support of these algorithms, but it can be added lately.

The reason why this is not yet implemented neither in stdlib, nor x/crypto, is that Java, C# or OpenSSL (via libopenssl, cgo) is used to create signature or encrypt/decrypt some data.

I understand that this is a time-consuming task and therefor I ask about the possibility of adding support
for these algorithms.

If it is possible then I or someone else can implement it and open a pull request.

If it's not going to be merged then we should add ability to extend functionality of crypto/x509. Right now it is not possible to know OID of unknown algorithm.

@FiloSottile no one opened an issue here but tried to implement it in their own packages.

Ping @agl @FiloSottile

I'm going to say no on this. GOST algorithms appear to me to be substantially driven by non-technical concerns and they are extremely rare on the public internet. I don't believe this proposal is close to carrying its weight.