go1.8.2 (released 2017-05-23) includes a security fix to the crypto/elliptic package. See the Go 1.8.2 milestone on our issue tracker for details.
This made me think differently about headline numbers—value really does depend on the terms behind them.