(g *GCMForTLS13) Open(dst, nonce, ciphertext, data []byte) ([]byte, error) { fips140.RecordApproved() return g.g.Open(dst, nonce, ciphertext, data) } // NewGCMForSSH returns a new AEAD that works like GCM, but enforces the // construction of nonces as specified in RFC 5647. // // This complies with FIPS 140-3 IG C.H Scenario 1.d. func NewGCMForSSH(cipher *aes.Block) (*GCMForSSH, error) { g, err := newGCM(&GCM{}, cipher, gcmStandardNonceSize, gcmTagSize) if err != nil { return nil, err } return &GCMForSSH{g:...

 gcmTagSize) if err != nil { return nil, err } // TLS 1.2 counters always start at zero. return &GCMWithCounterNonce{g: *g, startReady: true}, nil } // NewGCMForSSH returns a new AEAD that works like GCM, but enforces the // construction of nonces as specified in RFC 5647. // // This complies with FIPS 140-3 IG C.H Scenario 1.d. func NewGCMForSSH(cipher *aes.Block) (*GCMWithCounterNonce, error) { g, err := newGCM(&GCM{}, cipher, gcmStandardNonceSize, gcmTagSize) if err != nil { return nil, err }...