Golang Crypto Library vulnerability