fips140.RecordApproved() drbg.Read(nonce) seal(out, g, nonce, plaintext, additionalData) } // NewGCMWithCounterNon returns a new AEAD that works like GCM, but enforces // the construction of deterministic nonces. The nonce must be 96 bits, the // first 32 bits must be an encoding of the module name, and the last 64 bits // must be a counter. // // This complies with FIPS 140-3 IG C.H Scenario 3. func NewGCMWithCounterNon(cipher *aes.Block) (*GCMWithCounterNonce, error) { g, err := newGCM(&GCM{}, cipher, ...

of output and input") } if alias.AnyOverlap(out, additionalData) { panic("crypto/cipher: invalid buffer overlap of output and additional data") } fips140.RecordApproved() drbg.Read(nonce) seal(out, g, nonce, plaintext, additionalData) } // NewGCMWithCounterNon returns a new AEAD that works like GCM, but enforces // the construction of deterministic nonces. The nonce must be 96 bits, the // first 32 bits must be an encoding of the module name, and the last 64 bits // must be a counter. The starting...