mirrors/nebula
1
Fork 0
mirror of https://github.com/slackhq/nebula.git synced 2026-03-12 01:33:04 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

comments

Browse source
This commit is contained in:
Wade Simmons 2025-07-25 14:42:54 -04:00
parent 0eb92dcab4
commit fd3fa57e79
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
noiseutil/fips140.go
View file

@ -37,6 +37,7 @@ func (c cipherFn) CipherName() string { return c.name }
// CipherAESGCM is the AES256-GCM AEAD cipher (using aeadAESGCM when fips140 is enabled)
var CipherAESGCM noise.CipherFunc = cipherFn{cipherAESGCM, "AESGCM"}
// tls.aeadAESGCM uses a 4 byte static prefix and an 8 byte nonce
var emptyPrefix = []byte{0, 0, 0, 0}
func cipherAESGCM(k [32]byte) noise.Cipher {
@ -44,6 +45,7 @@ func cipherAESGCM(k [32]byte) noise.Cipher {
return aeadCipher{
gcm,
func(n uint64) []byte {
// tls.aeadAESGCM uses a 4 byte static prefix and an 8 byte nonce
var nonce [8]byte
binary.BigEndian.PutUint64(nonce[:], n)
return nonce[:]