parameters") } } func GenerateKey44() *PrivateKey { fipsSelfTest() fips140.RecordApproved() var seed [32]byte drbg.Read(seed[:]) priv := newPrivateKey(&seed, params44) fipsPCT(priv) return priv } func GenerateKey65() *PrivateKey { fipsSelfTest() fips140.RecordApproved() var seed [32]byte drbg.Read(seed[:]) priv := newPrivateKey(&seed, params65) fipsPCT(priv) return priv } func GenerateKey87() *PrivateKey { fipsSelfTest() fips140.RecordApproved() var seed [32]byte drbg.Read(seed[:]) priv := newPrivateKey(&seed,...

== math.MaxUint64 { panic("crypto/cipher: counter wrapped") } if counter < g.next { panic("crypto/cipher: counter decreased") } g.next = counter + 1 fips140.RecordApproved() return g.g.sealAfterIndicator(dst, nonce, plaintext, data) } func (g *GCMWithCounterNonce) Open(dst, nonce, ciphertext, data []byte) ([]byte, error) { fips140.RecordApproved() return g.g.Open(dst, nonce, ciphertext, data) } // NewGCMForTLS12 returns a new AEAD that works like GCM, but enforces the // construction of nonces as specified...