additionalData) { panic("crypto/cipher: invalid buffer overlap of output and additional data") } fips140.RecordApproved() drbg.Read(nonce) seal(out, g, nonce, plaintext, additionalData) } // NewGCMWithCounterNon returns a new AEAD that works like GCM, but enforces // the construction of deterministic nonces. The nonce must be 96 bits, the // first 32 bits must be an encoding of the module name, and the last 64 bits // must be a counter. // // This complies with FIPS 140-3 IG C.H Scenario 3. func NewGCMWithCounterNon(cipher...