tree 4b8989e380d1b56fae23c0d7326972f59e183ad0
parent 884d27f42877f544ba37fd9a6651180096180731
author Filippo Valsorda <filippo@golang.org> 1584690152 -0400
committer Filippo Valsorda <filippo@golang.org> 1587410314 +0000

chacha20: don't panic encrypting the final blocks

Certain operations with counter values close to overflowing were causing
an unnecessary panic, which was reachable due to the SetCounter API and
actually observed in QUIC.

Tests by lukechampine <luke.champine@gmail.com> from CL 220591.

Fixes golang/go#37157

Change-Id: Iba52edb1ba36af391b8fe4ee615c5c41d7e64f48
Reviewed-on: https://go-review.googlesource.com/c/crypto/+/224279
Run-TryBot: Filippo Valsorda <filippo@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Katie Hockman <katie@golang.org>