Microsoft Dev Blogs

Go 1.23.1-3 and 1.22.7-3 Microsoft builds now available

## Microsoft Go 1.23.1-3 and 1.22.7-3 Builds

A new set of Microsoft Go builds is now available for download. This release includes a fix to the Windows CNG crypto backend and no other changes.

### Microsoft Release Upstream Tag v1.23.1-3
- [go1.23.1 release notes](https://github.com/golang/go/releases/tag/go1.23.1)
- **Changes:** Fix for the Windows CNG crypto backend

### Microsoft Release Upstream Tag v1.22.7-3
- [go1.22.7 release notes](https://github.com/golang/go/releases/tag/go1.22.7)
- **Changes:** Fix for the Windows CNG crypto backend

### Impact on DES and 3DES Encryption
- A Go project using DES or 3DES with the Windows CNG crypto backend may be broken by this change.
- **Important:** Data longer than the DES or 3DES block size encrypted with the CNG backend won't be decryptable after this fix.

### Workaround Steps
1. Decrypt existing encrypted data using a Microsoft Go toolchain version without the fix.
2. Encrypt the decrypted data using a Microsoft Go toolchain version with the fix.
   
**Note:** Versions 1.23.1-2 and 1.22.7-2 can be used for the workaround as they do not contain this fix.  

**Additional Info:** DES and 3DES are considered cryptographically broken but are supported by Go and Microsoft Go for compatibility reasons.