tree a0c1c2f600b14cf3be2eeb7dd9f6cf830471bb30
parent 449a9e6a9e25dc871d31138e7a2ced6063878bdd
author Adam Langley <agl@google.com> 1516923828 -0800
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1516997384 +0000

Require only that the nonce be strictly monotonic in TLS's AES-GCM

Previously we required that the calls to TLS's AES-GCM use an
incrementing nonce. This change relaxes that requirement so that nonces
need only be strictly monotonic (i.e. values can now be skipped). This
still meets the uniqueness requirements of a nonce.

Change-Id: Ib649a58bb93bf4dc0e081de8a5971daefffe9c70
Reviewed-on: https://boringssl-review.googlesource.com/25384
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: David Benjamin <davidben@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>