Wade Simmons
|
90c7630270
|
extract the internal FIPS GCM implementation
We do this because the TLS wrapper is not thread safe on Open. instead of locking around it we
can grab the internal implementation that is thread safe. This is the FIPS
module implementation: `crypto/internal/fips140/aes/gcm.GCMWithXORCounterNonce`
- https://github.com/golang/go/blob/go1.26.4/src/crypto/internal/fips140/aes/gcm/gcm_nonces.go#L212-L287
The wrapper is struct `crypto/tls.xorNonceAEAD`, with field `aead`:
- https://github.com/golang/go/blob/go1.26.4/src/crypto/tls/cipher_suites.go#L482-L487
This can be cleaned up once these FIPS implementations are exposed directly:
- https://github.com/golang/go/issues/73110
|
2026-07-08 10:19:48 -04:00 |
|
Wade Simmons
|
060b46f4b3
|
better names
|
2026-06-09 13:49:55 -04:00 |
|
Wade Simmons
|
3b30526379
|
boringcrypto cleanup
|
2026-06-09 13:24:59 -04:00 |
|
Wade Simmons
|
cb9547b6a1
|
remove commented out code
|
2026-06-09 12:28:02 -04:00 |
|
Wade Simmons
|
06fb503fc3
|
WIP
|
2026-06-09 10:31:49 -04:00 |
|
Wade Simmons
|
90ea6346e9
|
WIP
|
2026-06-08 11:41:07 -04:00 |
|
Wade Simmons
|
37b752bb23
|
WIP
|
2026-06-08 09:43:28 -04:00 |
|
Wade Simmons
|
8671a4ebbd
|
cleanup
|
2026-06-01 10:21:34 -04:00 |
|
Wade Simmons
|
5dd566e220
|
also support fips140v1.26
This will be inprocess soon
|
2026-04-30 15:21:58 -04:00 |
|
Wade Simmons
|
243cf4a7c5
|
Revert "cleanup"
This reverts commit 08ee2ab35f.
|
2026-04-27 16:22:09 -04:00 |
|
Wade Simmons
|
08ee2ab35f
|
cleanup
|
2026-04-27 14:18:17 -04:00 |
|
Wade Simmons
|
fd3fa57e79
|
comments
|
2025-07-25 14:42:54 -04:00 |
|
Wade Simmons
|
0eb92dcab4
|
WIP
|
2025-07-25 14:32:37 -04:00 |
|
Wade Simmons
|
f6b206d96c
|
cleanup
|
2025-07-25 10:38:52 -04:00 |
|
Wade Simmons
|
6da314aa6b
|
WIP
|
2025-07-24 13:56:42 -04:00 |
|
Wade Simmons
|
4485c47641
|
WIP support new Go fips140 module
This will replace boring crypto at some point.
We should modify our protocol a bit and instead change to
NewGCMWithRandomNonce.
|
2025-03-31 12:08:58 -04:00 |
|