Public Report: Go x/crypto/ssh Cryptographic Implementation Review

NCC Group's Cryptography Services reviewed the Go x/crypto/ssh package on behalf of Teleport and documented 15 findings (resulting in 9 CVEs). The report notes the codebase is generally well-structured, recommends maintaining standards when adding support for post-quantum algorithms, and confirms the identified issues were addressed in the x/crypto v0.52.0 release as of May 22, 2026.