When it fits
- Password authentication is required.
Proposed guarantees
These describe the intended contract. Consult implementation and verification evidence before relying on them.
- Delegate cryptographic primitives to maintained libraries
What stays outside
- New cryptographic algorithm
Failure modes
- Unsafe parameters or secret leakage
Existing alternatives
Go x/crypto
Use a maintained password hashing implementation with reviewed parameters.
Implementations
No AMSL implementation is recorded in this snapshot. External alternatives above are not claims of AMSL adoption.
Evidence and verification
Candidate selection includes restricted, maintainer-reported evidence. It is not independently reproducible here, and no private source details are published.
No executed verification or real consumer adoption is recorded in this snapshot.
Open questions
- Reconsider only for a demonstrated integration gap, not new crypto.