kubernetes/vendor/gopkg.in/square/go-jose.v2/cipher/cbc_hmac.go

const nonceBytes …

// NewCBCHMAC instantiates a new AEAD based on CBC+HMAC.
func NewCBCHMAC(key []byte, newBlockCipher func([]byte) (cipher.Block, error)) (cipher.AEAD, error) { … }

type cbcAEAD …

func (ctx *cbcAEAD) NonceSize() int { … }

func (ctx *cbcAEAD) Overhead() int { … }

// Seal encrypts and authenticates the plaintext.
func (ctx *cbcAEAD) Seal(dst, nonce, plaintext, data []byte) []byte { … }

// Open decrypts and authenticates the ciphertext.
func (ctx *cbcAEAD) Open(dst, nonce, ciphertext, data []byte) ([]byte, error) { … }

// Compute an authentication tag
func (ctx *cbcAEAD) computeAuthTag(aad, nonce, ciphertext []byte) []byte { … }

// resize ensures that the given slice has a capacity of at least n bytes.
// If the capacity of the slice is less than n, a new slice is allocated
// and the existing data will be copied.
func resize(in []byte, n uint64) (head, tail []byte) { … }

// Apply padding
func padBuffer(buffer []byte, blockSize int) []byte { … }

// Remove padding
func unpadBuffer(buffer []byte, blockSize int) ([]byte, error) { … }