Found this through the Go blog where they've done some special work to support it recently in their FIPS-140-3 effort: https://go.dev/blog/fips140 https://go.d

Found this through the Go blog where they've done some special work to support it recently in their FIPS-140-3 effort: https://go.dev/blog/fips140 https://go.dev/blog/fips140 Nonce management with AES GCM is a huge pain, and I think this provides a way to just throw more randomness at the problem and stop worrying about it.