"x509.DecryptPEMBlock" is Deprecated, what is alternative?

Question

As of Go 1.16, x509.Encrypt/DecryptPEMBlock is Deprecated. What is the alternative for this to encrypt private key?

Ceramics

Duplicate: #67432735 – Bomar

@Peter: the question is indeed a duplicate, but the linked question doesn't even have an answer. It'd be great to expand upon your comment to an answer which could then be marked accepted and used as a canonical link to further deprecated questions – Tweet

There are alternatives, but requests for recommendations are off-topic for SO. One common format is encrypted PKCS8, though Go does not currently support decrypting these with the stand library: github.com/golang/go/issues/8860. – Panicstricken

These are deprecated due to the padding oracle attacks so there will be no std lib alternative as the intention is for the user to move away from this approach to another one. Read more here - github.com/golang/go/issues/59961 . – Spectrohelioscope