4 Commits

Include renames

Author	SHA1	Message	Date
Wade Simmons	9c5d701648	Support native Golang "fips140" mode (#1696) ... Add support for the "fips140" mode of Go: - https://go.dev/doc/security/fips140 - https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5247 You can build with `make fips140`, see the README changes for more info. Some differences from the boringcrypto builds: - We switch to using `go:linkname crypto/tls.aeadAESGCMTLS13`, which gives us the fips implementation for both `boringcrypto` and `fips140` modes. This means we also no longer need `-checklinkname=0` - Go native `fips140` doesn't need CGO_ENABLED=1 - We decide if we should use the fips140 GCM at runtime, if `fips140.Enabled()` is true. If you use the `make release-fips140`, we build with build tag `fips140enforce` which ensures the binary is running with fips140 enabled and that only P256 / AES-GCM is being used. If you don't want this enforce mode, you can build without the build tag.	2026-08-21 19:33:40 -04:00
Jack Doan	edc3c5e018	the definitive tun offloads branch (#1704)	2026-08-21 11:57:38 -05:00
Nate Brown	f15d10fc54	Enforce outbound message counter limits to prevent nonce reuse (#1841)	2026-08-19 20:48:02 -05:00
Nate Brown	5f920fdd7d	Remove the global noiseEndianness var (#1707)	2026-05-06 17:37:03 -05:00