The boringssl tree is the source (not build artifacts) vendored by Apple Swift Crypto revision 1c80d3aff53fedc445b60692980cb4f19a618657, BoringSSL 0226f30467f540a3f62ef48d453f93927da199b6. Upstream licenses are preserved. Assembly is omitted and OPENSSL_NO_ASM selects the upstream portable implementations. No upstream algorithms are edited. Root bssl_*.cc files compile the same upstream translation units for cgo, which does not recurse into subdirectories. SwiftPM directly builds those same sources. Requires CGO_ENABLED=1 and a native C++17 compiler. Existing pure-Go builds use an explicit unavailable stub for pairing while retaining the older wing/CLI features; never substitute hand-written PAKE. Build the pairing-capable Linux wing natively with g++; macOS-to-Linux cross compilation needs an appropriate C/C++ cross toolchain. This PAKE dialect is BoringSSL SPAKE2, not an arbitrary RFC 9382 wire implementation.