prf := hmac.New(sha256.New, s.key)
	prf.Write(iv)
	key := prf.Sum(make([]byte, 0, prf.Size()))

	block, err := aes.NewCipher(key)
	if err != nil {
		return DEK{}, err
	}
	aead, err := cipher.NewGCM(block)
	if err != nil {
		return DEK{}, err
	}

	plaintext, err := sioutil.Random(32)
	if err != nil {
		return DEK{}, err
	}
	ciphertext := aead.Seal(nil, nonce, plaintext, associatedData)

gcmPlatformData } func New(cipher *aes.Block, nonceSize, tagSize int) (*GCM, error) { // This function is outlined to let the allocation happen on the parent stack. return newGCM(&GCM{}, cipher, nonceSize, tagSize) } // newGCM is marked go:noinline to avoid it inlining into New, and making New // too complex to inline itself. // //go:noinline func newGCM(g *GCM, cipher *aes.Block, nonceSize, tagSize int) (*GCM, error) { if tagSize < gcmMinimumTagSize || tagSize > gcmBlockSize { return nil, errors.New("cipher:...

gcmPlatformData } func New(cipher *aes.Block, nonceSize, tagSize int) (*GCM, error) { // This function is outlined to let the allocation happen on the parent stack. return newGCM(&GCM{}, cipher, nonceSize, tagSize) } // newGCM is marked go:noinline to avoid it inlining into New, and making New // too complex to inline itself. // //go:noinline func newGCM(g *GCM, cipher *aes.Block, nonceSize, tagSize int) (*GCM, error) { if tagSize < gcmMinimumTagSize || tagSize > gcmBlockSize { return nil, errors.New("cipher:...