Commit Graph

17 Commits

Author SHA1 Message Date
Wade Simmons 3264ebf953 cleanup 2026-07-08 10:55:29 -04:00
Wade Simmons 90c7630270 extract the internal FIPS GCM implementation
We do this because the TLS wrapper is not thread safe on Open. instead of locking around it we
can grab the internal implementation that is thread safe. This is the FIPS
module implementation: `crypto/internal/fips140/aes/gcm.GCMWithXORCounterNonce`

- https://github.com/golang/go/blob/go1.26.4/src/crypto/internal/fips140/aes/gcm/gcm_nonces.go#L212-L287

The wrapper is struct `crypto/tls.xorNonceAEAD`, with field `aead`:

- https://github.com/golang/go/blob/go1.26.4/src/crypto/tls/cipher_suites.go#L482-L487

This can be cleaned up once these FIPS implementations are exposed directly:

- https://github.com/golang/go/issues/73110
2026-07-08 10:19:48 -04:00
Wade Simmons 060b46f4b3 better names 2026-06-09 13:49:55 -04:00
Wade Simmons 3b30526379 boringcrypto cleanup 2026-06-09 13:24:59 -04:00
Wade Simmons cb9547b6a1 remove commented out code 2026-06-09 12:28:02 -04:00
Wade Simmons 06fb503fc3 WIP 2026-06-09 10:31:49 -04:00
Wade Simmons 90ea6346e9 WIP 2026-06-08 11:41:07 -04:00
Wade Simmons 37b752bb23 WIP 2026-06-08 09:43:28 -04:00
Wade Simmons 8671a4ebbd cleanup 2026-06-01 10:21:34 -04:00
Wade Simmons 5dd566e220 also support fips140v1.26
This will be inprocess soon
2026-04-30 15:21:58 -04:00
Wade Simmons 243cf4a7c5 Revert "cleanup"
This reverts commit 08ee2ab35f.
2026-04-27 16:22:09 -04:00
Wade Simmons 08ee2ab35f cleanup 2026-04-27 14:18:17 -04:00
Wade Simmons fd3fa57e79 comments 2025-07-25 14:42:54 -04:00
Wade Simmons 0eb92dcab4 WIP 2025-07-25 14:32:37 -04:00
Wade Simmons f6b206d96c cleanup 2025-07-25 10:38:52 -04:00
Wade Simmons 6da314aa6b WIP 2025-07-24 13:56:42 -04:00
Wade Simmons 4485c47641 WIP support new Go fips140 module
This will replace boring crypto at some point.

We should modify our protocol a bit and instead change to
NewGCMWithRandomNonce.
2025-03-31 12:08:58 -04:00