The surprising thing is not the bug, it&#x27;s that go didn&#x27;t verify the result of the CRT calculation. That&#x27;s a standard countermeasure (although not present everywhere, Florian Weimer recently did some work on patching implementations that were lacking this check).<p>And nit: The OpenSSL bug didn&#x27;t affect libressl (I discovered it, I checked for that).