Mirrors
/
nebula
mirror of https://github.com/slackhq/nebula.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nebula/noiseutil
History
Wade Simmons e0553822b0
Use NewGCMTLS (when using experiment boringcrypto) (#803) 
* Use NewGCMTLS (when using experiment boringcrypto)

This change only affects builds built using `GOEXPERIMENT=boringcrypto`.
When built with this experiment, we use the NewGCMTLS() method exposed by
goboring, which validates that the nonce is strictly monotonically increasing.
This is the TLS 1.2 specification for nonce generation (which also matches the
method used by the Noise Protocol)

- https://github.com/golang/go/blob/go1.19/src/crypto/tls/cipher_suites.go#L520-L522
- https://github.com/golang/go/blob/go1.19/src/crypto/internal/boring/aes.go#L235-L237
- https://github.com/golang/go/blob/go1.19/src/crypto/internal/boring/aes.go#L250
- ae223d6138/include/openssl/aead.h (L379-L381)
- ae223d6138/crypto/fipsmodule/cipher/e_aes.c (L1082-L1093)

* need to lock around EncryptDanger in SendVia

* fix link to test vector
 		2023-04-05 11:08:23 -04:00
..
boring.go Use NewGCMTLS (when using experiment boringcrypto) (#803) 2023-04-05 11:08:23 -04:00
boring_test.go Use NewGCMTLS (when using experiment boringcrypto) (#803) 2023-04-05 11:08:23 -04:00
notboring.go Use NewGCMTLS (when using experiment boringcrypto) (#803) 2023-04-05 11:08:23 -04:00
notboring_test.go Use NewGCMTLS (when using experiment boringcrypto) (#803) 2023-04-05 11:08:23 -04:00