panic("crypto/cipher: counter decreased or remained the same") } g.next = counter + 1 } fips140.RecordApproved() return g.g.sealAfterIndicator(dst, nonce, plaintext, data) } func (g *GCMWithCounterNonce) Open(dst, nonce, ciphertext, data []byte) ([]byte, error) { fips140.RecordApproved() return g.g.Open(dst, nonce, ciphertext, data) } // NewGCMWithXORCounter returns a new AEAD that works like GCM, but // enforces the construction of deterministic nonces. The nonce must be 96 bits, // the first 32 bits...