1 comment

[ 2.3 ms ] story [ 9.6 ms ] thread
Found this through the Go blog where they've done some special work to support it recently in their FIPS-140-3 effort:

https://go.dev/blog/fips140

Nonce management with AES GCM is a huge pain, and I think this provides a way to just throw more randomness at the problem and stop worrying about it.