use gosshold instead of go.crypto because of incompatible API change