gcmTagSize) if err != nil { return nil, err } // TLS 1.2 counters always start at zero. return &GCMWithCounterNonce{g: *g, startReady: true}, nil } // NewGCMForSSH returns a new AEAD that works like GCM, but enforces the // construction of nonces as specified in RFC 5647. // // This complies with FIPS 140-3 IG C.H Scenario 1.d. func NewGCMForSSH(cipher *aes.Block) (*GCMWithCounterNonce, error) { g, err := newGCM(&GCM{}, cipher, gcmStandardNonceSize, gcmTagSize) if err != nil { return nil, err }...