hashicorp / go-secure-stdlib

Mozilla Public License 2.0
64 stars 24 forks source link

Add missing SHA256 suffix to CHACHA20 ciphers #44

Closed cipherboy closed 2 years ago

cipherboy commented 2 years ago

As reported by @nathkn:

Go has renamed the ChaCha20+Poly1305 cipher suites to include the missing SHA256 suffix. While the legacy variants are retained for backwards compatibility, we don't support the new names yet. Include both, to allow existing Vault configurations to continue working, but switch to preferring the new constant names.

See also: https://github.com/hashicorp/vault/issues/16782 See also: https://github.com/golang/go/commit/e2cac315082a9267135e96249b537d0bd0703175 See also: https://github.com/golang/go/issues/32061

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>