diff --git a/cipher_suites.go b/cipher_suites.go index 57ce64c..c443a82 100644 --- a/cipher_suites.go +++ b/cipher_suites.go @@ -512,11 +512,11 @@ func aeadAESGCM(key, noncePrefix []byte) aead { if len(noncePrefix) != noncePrefixLength { panic("tls: internal error: wrong nonce length") } - aes, err := aes.NewCipher(key) + aes, err := fipsaes.New(key) if err != nil { panic(err) } - aead, err := gcm.NewGCMForTLS12(aes.(*fipsaes.Block)) + aead, err := gcm.NewGCMForTLS12(aes) if err != nil { panic(err) } @@ -540,11 +540,11 @@ func aeadAESGCMTLS13(key, nonceMask []byte) aead { if len(nonceMask) != aeadNonceLength { panic("tls: internal error: wrong nonce length") } - aes, err := aes.NewCipher(key) + aes, err := fipsaes.New(key) if err != nil { panic(err) } - aead, err := gcm.NewGCMForTLS13(aes.(*fipsaes.Block)) + aead, err := gcm.NewGCMForTLS13(aes) if err != nil { panic(err) } diff --git a/tls.go b/tls.go index de585ed..1261b04 100644 --- a/tls.go +++ b/tls.go @@ -30,7 +30,6 @@ import ( "bytes" "context" "crypto" - "crypto/aes" "crypto/cipher" "crypto/ecdsa" "crypto/ed25519"