* Using ipset doing SNAT and packet filtering in IPVS kube-proxy ([#54219](https://github.com/kubernetes/kubernetes/pull/54219), [@m1093782566](https://github.com/m1093782566))

&GCMWithXORCounterNon{g: *g}, nil } // NewGCMForQUIC returns a new AEAD that works like GCM, but enforces the // construction of nonces as specified in RFC 9001, Section 5.3. // // Unlike in TLS 1.3, the QUIC nonce counter does not always start at zero, as // the packet number does not reset on key updates, so the XOR mask must be // provided explicitly instead of being learned on the first Seal call. Note // that the nonce passed to Seal must already be XOR'd with the IV, the IV is // provided here only to allow...

mul(i, j); x != uint32(s) { t.Fatalf("mul(%#x, %#x) = %#x, want %#x", i, j, x, s) } } } } // Check that S-boxes are inverses of each other. // They have more structure that we could test, // but if this sanity check passes, we'll assume // the cut and paste from the FIPS PDF worked. func TestSboxes(t *testing.T) { for i := 0; i < 256; i++ { if j := sbox0[sbox1[i]]; j != byte(i) { t.Errorf("sbox0[sbox1[%#x]] = %#x", i, j) } if j := sbox1[sbox0[i]]; j != byte(i) { t.Errorf("sbox1[sbox0[%#x]] = %#x", i,...