@FiloSottile requested issue #78178 to be considered for backport to the next 1.26 minor release.

@gopherbot, please open a Go 1.26 backport issue. X25519MLKEM768 was supposed to be wrapped in WithoutEnforcement while it was being implemented, but was missed. CL 759383 is a small enough change and it's tripping up enough people that it would be worth backporting. (The rest of the stack is just better testing, which we don't really need in the backport.)