box

Dec 4, 2024 GO-2024-3321

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Nov 7, 2024 GO-2024-3321

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Oct 4, 2024 GO-2024-3321

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Sep 4, 2024 GO-2024-3321

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Aug 6, 2024 GO-2024-3321

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Jul 5, 2024 GO-2024-3321

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Jun 4, 2024 GO-2024-3321

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

May 6, 2024 GO-2024-3321

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Apr 4, 2024 GO-2024-3321

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Mar 4, 2024 GO-2024-3321

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Feb 26, 2024 GO-2024-3321

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Feb 7, 2024 GO-2024-3321

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Jan 8, 2024 GO-2024-3321

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Dec 18, 2023 GO-2024-3321

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Nov 27, 2023 GO-2023-2402 +1 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Nov 8, 2023 GO-2023-2402 +1 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Oct 5, 2023 GO-2023-2402 +1 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Sep 5, 2023 GO-2023-2402 +1 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Aug 4, 2023 GO-2023-2402 +1 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Jul 5, 2023 GO-2023-2402 +1 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Jun 12, 2023 GO-2023-2402 +1 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

May 8, 2023 GO-2023-2402 +1 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Apr 6, 2023 GO-2023-2402 +1 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Mar 5, 2023 GO-2023-2402 +1 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Feb 8, 2023 GO-2023-2402 +1 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Jan 4, 2023 GO-2023-2402 +1 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Dec 6, 2022 GO-2023-2402 +1 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Nov 16, 2022 GO-2023-2402 +1 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Nov 8, 2022 GO-2023-2402 +1 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Oct 19, 2022 GO-2023-2402 +1 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Changes in this version

+ const AnonymousOverhead

+ const Overhead

+ func GenerateKey(rand io.Reader) (publicKey, privateKey *[32]byte, err error)

+ func Open(out, box []byte, nonce *[24]byte, peersPublicKey, privateKey *[32]byte) ([]byte, bool)

+ func OpenAfterPrecomputation(out, box []byte, nonce *[24]byte, sharedKey *[32]byte) ([]byte, bool)

+ func OpenAnonymous(out, box []byte, publicKey, privateKey *[32]byte) (message []byte, ok bool)

+ func Precompute(sharedKey, peersPublicKey, privateKey *[32]byte)

+ func Seal(out, message []byte, nonce *[24]byte, peersPublicKey, privateKey *[32]byte) []byte

+ func SealAfterPrecomputation(out, message []byte, nonce *[24]byte, sharedKey *[32]byte) []byte

+ func SealAnonymous(out, message []byte, recipient *[32]byte, rand io.Reader) ([]byte, error)