causing a timeout during the handshake (see [TLS post-quantum TL;DR fail](https://tldr.fail/)).
Go 1.24 also removed X25519Kyber768Draft00 and the Go 1.23 `tlskyber` setting.

Go 1.24 made [`ParsePKCS1PrivateKey`](/pkg/crypto/x509/#ParsePKCS1PrivateKey)
use and validate the CRT parameters in the encoded private key. This behavior
can be controlled with the `x509rsacrt` setting. Using `x509rsacrt=0` restores
the Go 1.23 behavior.

### Go 1.23

pkg crypto/x509, func ParseCertificates([]uint8) ([]*Certificate, error)
pkg crypto/x509, func ParseDERCRL([]uint8) (*pkix.CertificateList, error)
pkg crypto/x509, func ParsePKCS1PrivateKey([]uint8) (*rsa.PrivateKey, error)
pkg crypto/x509, func ParsePKCS8PrivateKey([]uint8) (interface{}, error)
pkg crypto/x509, func ParsePKIXPublicKey([]uint8) (interface{}, error)