"crypto/internal/fips140/hmac" ) // hmacDRBG is an SP 800-90A Rev. 1 HMAC_DRBG. // // It is only intended to be used to generate ECDSA nonces. Since it will be // instantiated ex-novo for each signature, its Generate function will only be // invoked once or twice (only for P-256, with probability 2⁻³²). // // Per Table 2, it has a reseed interval of 2^48 requests, and a maximum request // size of 2^19 bits (2^16 bytes, 64 KiB). type hmacDRBG struct { newHMAC func(key []byte) *hmac.HMAC hK *hmac.HMAC V []byte...

SetNoncePrefixAndMas(nonce []byte) error { if len(nonce) != gcmStandardNonceSize { return errors.New("crypto/cipher: incorrect nonce length given to SetNoncePrefixAndMas") } if g.ready { return errors.New("crypto/cipher: SetNoncePrefixAndMas called twice or after first Seal") } g.prefix = byteorder.BEUint32(nonce[:4]) g.mask = byteorder.BEUint64(nonce[4:]) g.ready = true return nil } func (g *GCMWithXORCounterNon) NonceSize() int { return gcmStandardNonceSize } func (g *GCMWithXORCounterNon) Overhead()...