Migrate to Go modules - remove vendor folder (#2504)

* Migrate to gomods

* Fix conflict

* gomod: Switch xenolf/lego to go-acme/lego

caddytls/config.go

@@ -22,12 +22,12 @@ import (
 	"os"
 	"sync/atomic"
 
-	"github.com/xenolf/lego/challenge/tlsalpn01"
+	"github.com/go-acme/lego/challenge/tlsalpn01"
 
+	"github.com/go-acme/lego/certcrypto"
 	"github.com/klauspost/cpuid"
 	"github.com/mholt/caddy"
 	"github.com/mholt/certmagic"
-	"github.com/xenolf/lego/certcrypto"
 )
 
 // Config describes how TLS should be configured and used.

caddytls/selfsigned.go

@@ -14,7 +14,7 @@ import (
 	"strings"
 	"time"
 
-	"github.com/xenolf/lego/certcrypto"
+	"github.com/go-acme/lego/certcrypto"
 )
 
 // newSelfSignedCertificate returns a new self-signed certificate.

caddytls/setup_test.go

@@ -23,7 +23,7 @@ import (
 
 	"github.com/mholt/caddy"
 	"github.com/mholt/certmagic"
-	"github.com/xenolf/lego/certcrypto"
+	"github.com/go-acme/lego/certcrypto"
 )
 
 func TestMain(m *testing.M) {

caddytls/tls.go

@@ -29,9 +29,9 @@
 package caddytls
 
 import (
+	"github.com/go-acme/lego/challenge"
 	"github.com/mholt/caddy"
 	"github.com/mholt/certmagic"
-	"github.com/xenolf/lego/challenge"
 )
 
 // ConfigHolder is any type that has a Config; it presumably is
@@ -93,7 +93,7 @@ var KnownACMECAs = []string{
 //
 // challenge.Provider is an interface that allows the implementation of custom
 // challenge providers. For more details, see:
-// https://godoc.org/github.com/xenolf/lego/acme#ChallengeProvider
+// https://godoc.org/github.com/go-acme/lego/acme#ChallengeProvider
 type ChallengeProvider challenge.Provider
 
 // DNSProviderConstructor is a function that takes credentials and

go.mod

+module github.com/mholt/caddy
+
+go 1.12
+
+require (
+	github.com/bifurcation/mint v0.0.0-20190129141059-83ba9bc2ead9 // indirect
+	github.com/dustin/go-humanize v1.0.0
+	github.com/flynn/go-shlex v0.0.0-20150515145356-3f9db97f8568
+	github.com/go-acme/lego v2.4.0+incompatible
+	github.com/google/uuid v1.1.1
+	github.com/gorilla/websocket v1.4.0
+	github.com/hashicorp/go-syslog v1.0.0
+	github.com/hashicorp/golang-lru v0.5.1 // indirect
+	github.com/jimstudt/http-authentication v0.0.0-20140401203705-3eca13d6893a
+	github.com/klauspost/cpuid v1.2.0
+	github.com/lucas-clemente/aes12 v0.0.0-20171027163421-cd47fb39b79f // indirect
+	github.com/lucas-clemente/quic-go v0.7.1-0.20190305092557-966b00dd3dc9
+	github.com/lucas-clemente/quic-go-certificates v0.0.0-20160823095156-d2f86524cced // indirect
+	github.com/mholt/certmagic v0.0.0-20190319183800-ee1543e2f234
+	github.com/naoina/go-stringutil v0.1.0 // indirect
+	github.com/naoina/toml v0.1.1
+	github.com/russross/blackfriday v0.0.0-20170610170232-067529f716f4
+	github.com/shurcooL/sanitized_anchor_name v1.0.0 // indirect
+	golang.org/x/net v0.0.0-20190328230028-74de082e2cca
+	gopkg.in/natefinch/lumberjack.v2 v2.0.0
+	gopkg.in/yaml.v2 v2.2.2
+)

go.sum

+github.com/bifurcation/mint v0.0.0-20190129141059-83ba9bc2ead9 h1:cJwkHhcmnrWFPCg8eUPm7JJCnhnF93lFUe2ukQnXvJ4=
+github.com/bifurcation/mint v0.0.0-20190129141059-83ba9bc2ead9/go.mod h1:zVt7zX3K/aDCk9Tj+VM7YymsX66ERvzCJzw8rFCX2JU=
+github.com/cenkalti/backoff v2.1.1+incompatible h1:tKJnvO2kl0zmb/jA5UKAt4VoEVw1qxKWjE/Bpp46npY=
+github.com/cenkalti/backoff v2.1.1+incompatible/go.mod h1:90ReRw6GdpyfrHakVjL/QHaoyV4aDUVVkXQJJJ3NXXM=
+github.com/cheekybits/genny v1.0.0 h1:uGGa4nei+j20rOSeDeP5Of12XVm7TGUd4dJA9RDitfE=
+github.com/cheekybits/genny v1.0.0/go.mod h1:+tQajlRqAUrPI7DOSpB0XAqZYtQakVtB7wXkRAgjxjQ=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/dustin/go-humanize v1.0.0 h1:VSnTsYCnlFHaM2/igO1h6X3HA71jcobQuxemgkq4zYo=
+github.com/dustin/go-humanize v1.0.0/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk=
+github.com/flynn/go-shlex v0.0.0-20150515145356-3f9db97f8568 h1:BHsljHzVlRcyQhjrss6TZTdY2VfCqZPbv5k3iBFa2ZQ=
+github.com/flynn/go-shlex v0.0.0-20150515145356-3f9db97f8568/go.mod h1:xEzjJPgXI435gkrCt3MPfRiAkVrwSbHsst4LCFVfpJc=
+github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMoQvtojpjFo=
+github.com/go-acme/lego v2.3.1-0.20190318164254-3684cc738d37+incompatible/go.mod h1:yzMNe9CasVUhkquNvti5nAtPmG94USbYxYrZfTkIn0M=
+github.com/go-acme/lego v2.4.0+incompatible h1:+BTLUfLtDc5qQauyiTCXH6lupEUOCvXyGlEjdeU0YQI=
+github.com/go-acme/lego v2.4.0+incompatible/go.mod h1:yzMNe9CasVUhkquNvti5nAtPmG94USbYxYrZfTkIn0M=
+github.com/golang/mock v1.2.0/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
+github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
+github.com/google/uuid v1.1.1 h1:Gkbcsh/GbpXz7lPftLA3P6TYMwjCLYm83jiFQZF/3gY=
+github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/gorilla/websocket v1.4.0 h1:WDFjx/TMzVgy9VdMMQi2K2Emtwi2QcUQsztZ/zLaH/Q=
+github.com/gorilla/websocket v1.4.0/go.mod h1:E7qHFY5m1UJ88s3WnNqhKjPHQ0heANvMoAMk2YaljkQ=
+github.com/hashicorp/go-syslog v1.0.0 h1:KaodqZuhUoZereWVIYmpUgZysurB1kBLX2j0MwMrUAE=
+github.com/hashicorp/go-syslog v1.0.0/go.mod h1:qPfqrKkXGihmCqbJM2mZgkZGvKG1dFdvsLplgctolz4=
+github.com/hashicorp/golang-lru v0.5.1 h1:0hERBMJE1eitiLkihrMvRVBYAkpHzc/J3QdDN+dAcgU=
+github.com/hashicorp/golang-lru v0.5.1/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8=
+github.com/hpcloud/tail v1.0.0/go.mod h1:ab1qPbhIpdTxEkNHXyeSf5vhxWSCs/tWer42PpOxQnU=
+github.com/jimstudt/http-authentication v0.0.0-20140401203705-3eca13d6893a h1:BcF8coBl0QFVhe8vAMMlD+CV8EISiu9MGKLoj6ZEyJA=
+github.com/jimstudt/http-authentication v0.0.0-20140401203705-3eca13d6893a/go.mod h1:wK6yTYYcgjHE1Z1QtXACPDjcFJyBskHEdagmnq3vsP8=
+github.com/klauspost/cpuid v1.2.0 h1:NMpwD2G9JSFOE1/TJjGSo5zG7Yb2bTe7eq1jH+irmeE=
+github.com/klauspost/cpuid v1.2.0/go.mod h1:Pj4uuM528wm8OyEC2QMXAi2YiTZ96dNQPGgoMS4s3ek=
+github.com/lucas-clemente/aes12 v0.0.0-20171027163421-cd47fb39b79f h1:sSeNEkJrs+0F9TUau0CgWTTNEwF23HST3Eq0A+QIx+A=
+github.com/lucas-clemente/aes12 v0.0.0-20171027163421-cd47fb39b79f/go.mod h1:JpH9J1c9oX6otFSgdUHwUBUizmKlrMjxWnIAjff4m04=
+github.com/lucas-clemente/quic-go v0.7.1-0.20190305092557-966b00dd3dc9 h1:a63dIU38jDMOGFGAFlxjcLCCngoJ0UjHk6EGgUZ3oiM=
+github.com/lucas-clemente/quic-go v0.7.1-0.20190305092557-966b00dd3dc9/go.mod h1:m0oFjJxxNCH6+RsoooGlifXEGnJRIA+WiXXCc9kyiok=
+github.com/lucas-clemente/quic-go-certificates v0.0.0-20160823095156-d2f86524cced h1:zqEC1GJZFbGZA0tRyNZqRjep92K5fujFtFsu5ZW7Aug=
+github.com/lucas-clemente/quic-go-certificates v0.0.0-20160823095156-d2f86524cced/go.mod h1:NCcRLrOTZbzhZvixZLlERbJtDtYsmMw8Jc4vS8Z0g58=
+github.com/marten-seemann/qtls v0.2.0 h1:SnGwbmSUjODZ3PPCG6N0GX0w30yvndyFmoNY2pbgW+s=
+github.com/marten-seemann/qtls v0.2.0/go.mod h1:xzjG7avBwGGbdZ8dTGxlBnLArsVKLvwmjgmPuiQEcYk=
+github.com/mholt/certmagic v0.0.0-20190319183800-ee1543e2f234 h1:6biVHmhBIOQCzdOClOJ97D/Ip9oH8TgFftq2bj/93YI=
+github.com/mholt/certmagic v0.0.0-20190319183800-ee1543e2f234/go.mod h1:KvmxBmeVqj88J9Z9us/x04Yp/YYfMtmGkhQFWewFe6U=
+github.com/miekg/dns v1.1.3 h1:1g0r1IvskvgL8rR+AcHzUA+oFmGcQlaIm4IqakufeMM=
+github.com/miekg/dns v1.1.3/go.mod h1:W1PPwlIAgtquWBMBEV9nkV9Cazfe8ScdGz/Lj7v3Nrg=
+github.com/naoina/go-stringutil v0.1.0 h1:rCUeRUHjBjGTSHl0VC00jUPLz8/F9dDzYI70Hzifhks=
+github.com/naoina/go-stringutil v0.1.0/go.mod h1:XJ2SJL9jCtBh+P9q5btrd/Ylo8XwT/h1USek5+NqSA0=
+github.com/naoina/toml v0.1.1 h1:PT/lllxVVN0gzzSqSlHEmP8MJB4MY2U7STGxiouV4X8=
+github.com/naoina/toml v0.1.1/go.mod h1:NBIhNtsFMo3G2szEBne+bO4gS192HuIYRqfvOWb4i1E=
+github.com/onsi/ginkgo v1.6.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
+github.com/onsi/ginkgo v1.7.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
+github.com/onsi/gomega v1.4.3/go.mod h1:ex+gbHU/CVuBBDIJjb2X0qEXbFg53c61hWP/1CpauHY=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/russross/blackfriday v0.0.0-20170610170232-067529f716f4 h1:S9YlS71UNJIyS61OqGAmLXv3w5zclSidN+qwr80XxKs=
+github.com/russross/blackfriday v0.0.0-20170610170232-067529f716f4/go.mod h1:JO/DiYxRf+HjHt06OyowR9PTA263kcR/rfWxYHBV53g=
+github.com/shurcooL/sanitized_anchor_name v1.0.0 h1:PdmoCO6wvbs+7yrJyMORt4/BmY5IYyJwS/kOiWx8mHo=
+github.com/shurcooL/sanitized_anchor_name v1.0.0/go.mod h1:1NzhyTcUVG4SuEtjjoZeVRXNmyL/1OwPU0+IJeTBvfc=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
+golang.org/x/crypto v0.0.0-20190123085648-057139ce5d2b/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
+golang.org/x/crypto v0.0.0-20190228161510-8dd112bcdc25/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2 h1:VklqNMn3ovrHsnt90PveolxSbWFaJdECFbxSq0Mqo2M=
+golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20190125091013-d26f9f9a57f3/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20190328230028-74de082e2cca h1:hyA6yiAgbUwuWqtscNvWAI7U1CtlaD1KilQ6iudt1aI=
+golang.org/x/net v0.0.0-20190328230028-74de082e2cca/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190124100055-b90733256f2e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a h1:1BGLXjeY4akVXGgbC9HugT3Jv3hCI0z56oJR5vAMgBU=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190228124157-a34e9553db1e h1:ZytStCyV048ZqDsWHiYDdoI2Vd4msMcrDECFxS+tL9c=
+golang.org/x/sys v0.0.0-20190228124157-a34e9553db1e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/text v0.3.0 h1:g61tztE5qeGQ89tm6NTjjM9VPIm088od1l6aSorWRWg=
+golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/fsnotify.v1 v1.4.7/go.mod h1:Tz8NjZHkW78fSQdbUxIjBTcgA1z1m8ZHf0WmKUhAMys=
+gopkg.in/natefinch/lumberjack.v2 v2.0.0 h1:1Lc07Kr7qY4U2YPouBjpCLxpiyxIVoxqXgkXLknAOE8=
+gopkg.in/natefinch/lumberjack.v2 v2.0.0/go.mod h1:l0ndWWf7gzL7RNwBG7wST/UCcT4T24xpD6X8LsfU/+k=
+gopkg.in/square/go-jose.v2 v2.2.2 h1:orlkJ3myw8CN1nVQHBFfloD+L3egixIa4FvUP6RosSA=
+gopkg.in/square/go-jose.v2 v2.2.2/go.mod h1:M9dMgbHiYLoDGQrXy7OpJDJWiKiU//h+vD76mk0e1AI=
+gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw=
+gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.2.2 h1:ZCJp+EgiOT7lHqUV2J862kp8Qj64Jo6az82+3Td9dZw=
+gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=

vendor/github.com/aead/chacha20/LICENSE

-The MIT License (MIT)
-
-Copyright (c) 2016 Andreas Auernhammer
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

vendor/github.com/aead/chacha20/chacha/chacha.go

-// Copyright (c) 2016 Andreas Auernhammer. All rights reserved.
-// Use of this source code is governed by a license that can be
-// found in the LICENSE file.
-
-// Package chacha implements some low-level functions of the
-// ChaCha cipher family.
-package chacha // import "github.com/aead/chacha20/chacha"
-
-import (
-	"encoding/binary"
-	"errors"
-	"math"
-)
-
-const (
-	// NonceSize is the size of the ChaCha20 nonce in bytes.
-	NonceSize = 8
-
-	// INonceSize is the size of the IETF-ChaCha20 nonce in bytes.
-	INonceSize = 12
-
-	// XNonceSize is the size of the XChaCha20 nonce in bytes.
-	XNonceSize = 24
-
-	// KeySize is the size of the key in bytes.
-	KeySize = 32
-)
-
-var (
-	useSSE2  bool
-	useSSSE3 bool
-	useAVX   bool
-	useAVX2  bool
-)
-
-var (
-	errKeySize      = errors.New("chacha20/chacha: bad key length")
-	errInvalidNonce = errors.New("chacha20/chacha: bad nonce length")
-)
-
-func setup(state *[64]byte, nonce, key []byte) (err error) {
-	if len(key) != KeySize {
-		err = errKeySize
-		return
-	}
-	var Nonce [16]byte
-	switch len(nonce) {
-	case NonceSize:
-		copy(Nonce[8:], nonce)
-		initialize(state, key, &Nonce)
-	case INonceSize:
-		copy(Nonce[4:], nonce)
-		initialize(state, key, &Nonce)
-	case XNonceSize:
-		var tmpKey [32]byte
-		var hNonce [16]byte
-
-		copy(hNonce[:], nonce[:16])
-		copy(tmpKey[:], key)
-		HChaCha20(&tmpKey, &hNonce, &tmpKey)
-		copy(Nonce[8:], nonce[16:])
-		initialize(state, tmpKey[:], &Nonce)
-
-		// BUG(aead): A "good" compiler will remove this (optimizations)
-		//			  But using the provided key instead of tmpKey,
-		//			  will change the key (-> probably confuses users)
-		for i := range tmpKey {
-			tmpKey[i] = 0
-		}
-	default:
-		err = errInvalidNonce
-	}
-	return
-}
-
-// XORKeyStream crypts bytes from src to dst using the given nonce and key.
-// The length of the nonce determinds the version of ChaCha20:
-// - NonceSize:  ChaCha20/r with a 64 bit nonce and a 2^64 * 64 byte period.
-// - INonceSize: ChaCha20/r as defined in RFC 7539 and a 2^32 * 64 byte period.
-// - XNonceSize: XChaCha20/r with a 192 bit nonce and a 2^64 * 64 byte period.
-// The rounds argument specifies the number of rounds performed for keystream
-// generation - valid values are 8, 12 or 20. The src and dst may be the same slice
-// but otherwise should not overlap. If len(dst) < len(src) this function panics.
-// If the nonce is neither 64, 96 nor 192 bits long, this function panics.
-func XORKeyStream(dst, src, nonce, key []byte, rounds int) {
-	if rounds != 20 && rounds != 12 && rounds != 8 {
-		panic("chacha20/chacha: bad number of rounds")
-	}
-	if len(dst) < len(src) {
-		panic("chacha20/chacha: dst buffer is to small")
-	}
-	if len(nonce) == INonceSize && uint64(len(src)) > (1<<38) {
-		panic("chacha20/chacha: src is too large")
-	}
-
-	var block, state [64]byte
-	if err := setup(&state, nonce, key); err != nil {
-		panic(err)
-	}
-	xorKeyStream(dst, src, &block, &state, rounds)
-}
-
-// Cipher implements ChaCha20/r (XChaCha20/r) for a given number of rounds r.
-type Cipher struct {
-	state, block [64]byte
-	off          int
-	rounds       int // 20 for ChaCha20
-	noncesize    int
-}
-
-// NewCipher returns a new *chacha.Cipher implementing the ChaCha20/r or XChaCha20/r
-// (r = 8, 12 or 20) stream cipher. The nonce must be unique for one key for all time.
-// The length of the nonce determinds the version of ChaCha20:
-// - NonceSize:  ChaCha20/r with a 64 bit nonce and a 2^64 * 64 byte period.
-// - INonceSize: ChaCha20/r as defined in RFC 7539 and a 2^32 * 64 byte period.
-// - XNonceSize: XChaCha20/r with a 192 bit nonce and a 2^64 * 64 byte period.
-// If the nonce is neither 64, 96 nor 192 bits long, a non-nil error is returned.
-func NewCipher(nonce, key []byte, rounds int) (*Cipher, error) {
-	if rounds != 20 && rounds != 12 && rounds != 8 {
-		panic("chacha20/chacha: bad number of rounds")
-	}
-
-	c := new(Cipher)
-	if err := setup(&(c.state), nonce, key); err != nil {
-		return nil, err
-	}
-	c.rounds = rounds
-
-	if len(nonce) == INonceSize {
-		c.noncesize = INonceSize
-	} else {
-		c.noncesize = NonceSize
-	}
-
-	return c, nil
-}
-
-// XORKeyStream crypts bytes from src to dst. Src and dst may be the same slice
-// but otherwise should not overlap. If len(dst) < len(src) the function panics.
-func (c *Cipher) XORKeyStream(dst, src []byte) {
-	if len(dst) < len(src) {
-		panic("chacha20/chacha: dst buffer is to small")
-	}
-
-	if c.off > 0 {
-		n := len(c.block[c.off:])
-		if len(src) <= n {
-			for i, v := range src {
-				dst[i] = v ^ c.block[c.off]
-				c.off++
-			}
-			if c.off == 64 {
-				c.off = 0
-			}
-			return
-		}
-
-		for i, v := range c.block[c.off:] {
-			dst[i] = src[i] ^ v
-		}
-		src = src[n:]
-		dst = dst[n:]
-		c.off = 0
-	}
-
-	// check for counter overflow
-	blocksToXOR := len(src) / 64
-	if len(src)%64 != 0 {
-		blocksToXOR++
-	}
-	var overflow bool
-	if c.noncesize == INonceSize {
-		overflow = binary.LittleEndian.Uint32(c.state[48:]) > math.MaxUint32-uint32(blocksToXOR)
-	} else {
-		overflow = binary.LittleEndian.Uint64(c.state[48:]) > math.MaxUint64-uint64(blocksToXOR)
-	}
-	if overflow {
-		panic("chacha20/chacha: counter overflow")
-	}
-
-	c.off += xorKeyStream(dst, src, &(c.block), &(c.state), c.rounds)
-}
-
-// SetCounter skips ctr * 64 byte blocks. SetCounter(0) resets the cipher.
-// This function always skips the unused keystream of the current 64 byte block.
-func (c *Cipher) SetCounter(ctr uint64) {
-	if c.noncesize == INonceSize {
-		binary.LittleEndian.PutUint32(c.state[48:], uint32(ctr))
-	} else {
-		binary.LittleEndian.PutUint64(c.state[48:], ctr)
-	}
-	c.off = 0
-}
-
-// HChaCha20 generates 32 pseudo-random bytes from a 128 bit nonce and a 256 bit secret key.
-// It can be used as a key-derivation-function (KDF).
-func HChaCha20(out *[32]byte, nonce *[16]byte, key *[32]byte) { hChaCha20(out, nonce, key) }

vendor/github.com/aead/chacha20/chacha/chachaAVX2_amd64.s

-// Copyright (c) 2016 Andreas Auernhammer. All rights reserved.
-// Use of this source code is governed by a license that can be
-// found in the LICENSE file.
-
-// +build amd64,!gccgo,!appengine,!nacl
-
-#include "const.s"
-#include "macro.s"
-
-#define TWO 0(SP)
-#define C16 32(SP)
-#define C8 64(SP)
-#define STATE_0 96(SP)
-#define STATE_1 128(SP)
-#define STATE_2 160(SP)
-#define STATE_3 192(SP)
-#define TMP_0 224(SP)
-#define TMP_1 256(SP)
-
-// func xorKeyStreamAVX(dst, src []byte, block, state *[64]byte, rounds int) int
-TEXT ·xorKeyStreamAVX2(SB), 4, $320-80
-	MOVQ dst_base+0(FP), DI
-	MOVQ src_base+24(FP), SI
-	MOVQ block+48(FP), BX
-	MOVQ state+56(FP), AX
-	MOVQ rounds+64(FP), DX
-	MOVQ src_len+32(FP), CX
-
-	MOVQ SP, R8
-	ADDQ $32, SP
-	ANDQ $-32, SP
-
-	VMOVDQU    0(AX), Y2
-	VMOVDQU    32(AX), Y3
-	VPERM2I128 $0x22, Y2, Y0, Y0
-	VPERM2I128 $0x33, Y2, Y1, Y1
-	VPERM2I128 $0x22, Y3, Y2, Y2
-	VPERM2I128 $0x33, Y3, Y3, Y3
-
-	TESTQ CX, CX
-	JZ    done
-
-	VMOVDQU ·one_AVX2<>(SB), Y4
-	VPADDD  Y4, Y3, Y3
-
-	VMOVDQA Y0, STATE_0
-	VMOVDQA Y1, STATE_1
-	VMOVDQA Y2, STATE_2
-	VMOVDQA Y3, STATE_3
-
-	VMOVDQU ·rol16_AVX2<>(SB), Y4
-	VMOVDQU ·rol8_AVX2<>(SB), Y5
-	VMOVDQU ·two_AVX2<>(SB), Y6
-	VMOVDQA Y4, Y14
-	VMOVDQA Y5, Y15
-	VMOVDQA Y4, C16
-	VMOVDQA Y5, C8
-	VMOVDQA Y6, TWO
-
-	CMPQ CX, $64
-	JBE  between_0_and_64
-	CMPQ CX, $192
-	JBE  between_64_and_192
-	CMPQ CX, $320
-	JBE  between_192_and_320
-	CMPQ CX, $448
-	JBE  between_320_and_448
-
-at_least_512:
-	VMOVDQA Y0, Y4
-	VMOVDQA Y1, Y5
-	VMOVDQA Y2, Y6
-	VPADDQ  TWO, Y3, Y7
-	VMOVDQA Y0, Y8
-	VMOVDQA Y1, Y9
-	VMOVDQA Y2, Y10
-	VPADDQ  TWO, Y7, Y11
-	VMOVDQA Y0, Y12
-	VMOVDQA Y1, Y13
-	VMOVDQA Y2, Y14
-	VPADDQ  TWO, Y11, Y15
-
-	MOVQ DX, R9
-
-chacha_loop_512:
-	VMOVDQA Y8, TMP_0
-	CHACHA_QROUND_AVX(Y0, Y1, Y2, Y3, Y8, C16, C8)
-	CHACHA_QROUND_AVX(Y4, Y5, Y6, Y7, Y8, C16, C8)
-	VMOVDQA TMP_0, Y8
-	VMOVDQA Y0, TMP_0
-	CHACHA_QROUND_AVX(Y8, Y9, Y10, Y11, Y0, C16, C8)
-	CHACHA_QROUND_AVX(Y12, Y13, Y14, Y15, Y0, C16, C8)
-	CHACHA_SHUFFLE_AVX(Y1, Y2, Y3)
-	CHACHA_SHUFFLE_AVX(Y5, Y6, Y7)
-	CHACHA_SHUFFLE_AVX(Y9, Y10, Y11)
-	CHACHA_SHUFFLE_AVX(Y13, Y14, Y15)
-
-	CHACHA_QROUND_AVX(Y12, Y13, Y14, Y15, Y0, C16, C8)
-	CHACHA_QROUND_AVX(Y8, Y9, Y10, Y11, Y0, C16, C8)
-	VMOVDQA TMP_0, Y0
-	VMOVDQA Y8, TMP_0
-	CHACHA_QROUND_AVX(Y4, Y5, Y6, Y7, Y8, C16, C8)
-	CHACHA_QROUND_AVX(Y0, Y1, Y2, Y3, Y8, C16, C8)
-	VMOVDQA TMP_0, Y8
-	CHACHA_SHUFFLE_AVX(Y3, Y2, Y1)
-	CHACHA_SHUFFLE_AVX(Y7, Y6, Y5)
-	CHACHA_SHUFFLE_AVX(Y11, Y10, Y9)
-	CHACHA_SHUFFLE_AVX(Y15, Y14, Y13)
-	SUBQ    $2, R9
-	JA      chacha_loop_512
-
-	VMOVDQA Y12, TMP_0
-	VMOVDQA Y13, TMP_1
-	VPADDD  STATE_0, Y0, Y0
-	VPADDD  STATE_1, Y1, Y1
-	VPADDD  STATE_2, Y2, Y2
-	VPADDD  STATE_3, Y3, Y3
-	XOR_AVX2(DI, SI, 0, Y0, Y1, Y2, Y3, Y12, Y13)
-	VMOVDQA STATE_0, Y0
-	VMOVDQA STATE_1, Y1
-	VMOVDQA STATE_2, Y2
-	VMOVDQA STATE_3, Y3
-	VPADDQ  TWO, Y3, Y3
-
-	VPADDD Y0, Y4, Y4
-	VPADDD Y1, Y5, Y5
-	VPADDD Y2, Y6, Y6
-	VPADDD Y3, Y7, Y7
-	XOR_AVX2(DI, SI, 128, Y4, Y5, Y6, Y7, Y12, Y13)
-	VPADDQ TWO, Y3, Y3
-
-	VPADDD Y0, Y8, Y8
-	VPADDD Y1, Y9, Y9
-	VPADDD Y2, Y10, Y10
-	VPADDD Y3, Y11, Y11
-	XOR_AVX2(DI, SI, 256, Y8, Y9, Y10, Y11, Y12, Y13)
-	VPADDQ TWO, Y3, Y3
-
-	VPADDD TMP_0, Y0, Y12
-	VPADDD TMP_1, Y1, Y13
-	VPADDD Y2, Y14, Y14
-	VPADDD Y3, Y15, Y15
-	VPADDQ TWO, Y3, Y3
-
-	CMPQ CX, $512
-	JB   less_than_512
-
-	XOR_AVX2(DI, SI, 384, Y12, Y13, Y14, Y15, Y4, Y5)
-	VMOVDQA Y3, STATE_3
-	ADDQ    $512, SI
-	ADDQ    $512, DI
-	SUBQ    $512, CX
-	CMPQ    CX, $448
-	JA      at_least_512
-
-	TESTQ CX, CX
-	JZ    done
-
-	VMOVDQA C16, Y14
-	VMOVDQA C8, Y15
-
-	CMPQ CX, $64
-	JBE  between_0_and_64
-	CMPQ CX, $192
-	JBE  between_64_and_192
-	CMPQ CX, $320
-	JBE  between_192_and_320
-	JMP  between_320_and_448
-
-less_than_512:
-	XOR_UPPER_AVX2(DI, SI, 384, Y12, Y13, Y14, Y15, Y4, Y5)
-	EXTRACT_LOWER(BX, Y12, Y13, Y14, Y15, Y4)
-	ADDQ $448, SI
-	ADDQ $448, DI
-	SUBQ $448, CX
-	JMP  finalize
-
-between_320_and_448:
-	VMOVDQA Y0, Y4
-	VMOVDQA Y1, Y5
-	VMOVDQA Y2, Y6
-	VPADDQ  TWO, Y3, Y7
-	VMOVDQA Y0, Y8
-	VMOVDQA Y1, Y9
-	VMOVDQA Y2, Y10
-	VPADDQ  TWO, Y7, Y11
-
-	MOVQ DX, R9
-
-chacha_loop_384:
-	CHACHA_QROUND_AVX(Y0, Y1, Y2, Y3, Y13, Y14, Y15)
-	CHACHA_QROUND_AVX(Y4, Y5, Y6, Y7, Y13, Y14, Y15)
-	CHACHA_QROUND_AVX(Y8, Y9, Y10, Y11, Y13, Y14, Y15)
-	CHACHA_SHUFFLE_AVX(Y1, Y2, Y3)
-	CHACHA_SHUFFLE_AVX(Y5, Y6, Y7)
-	CHACHA_SHUFFLE_AVX(Y9, Y10, Y11)
-	CHACHA_QROUND_AVX(Y0, Y1, Y2, Y3, Y13, Y14, Y15)
-	CHACHA_QROUND_AVX(Y4, Y5, Y6, Y7, Y13, Y14, Y15)
-	CHACHA_QROUND_AVX(Y8, Y9, Y10, Y11, Y13, Y14, Y15)
-	CHACHA_SHUFFLE_AVX(Y3, Y2, Y1)
-	CHACHA_SHUFFLE_AVX(Y7, Y6, Y5)
-	CHACHA_SHUFFLE_AVX(Y11, Y10, Y9)
-	SUBQ $2, R9
-	JA   chacha_loop_384
-
-	VPADDD  STATE_0, Y0, Y0
-	VPADDD  STATE_1, Y1, Y1
-	VPADDD  STATE_2, Y2, Y2
-	VPADDD  STATE_3, Y3, Y3
-	XOR_AVX2(DI, SI, 0, Y0, Y1, Y2, Y3, Y12, Y13)
-	VMOVDQA STATE_0, Y0
-	VMOVDQA STATE_1, Y1
-	VMOVDQA STATE_2, Y2
-	VMOVDQA STATE_3, Y3
-	VPADDQ  TWO, Y3, Y3
-
-	VPADDD Y0, Y4, Y4
-	VPADDD Y1, Y5, Y5
-	VPADDD Y2, Y6, Y6
-	VPADDD Y3, Y7, Y7
-	XOR_AVX2(DI, SI, 128, Y4, Y5, Y6, Y7, Y12, Y13)
-	VPADDQ TWO, Y3, Y3
-
-	VPADDD Y0, Y8, Y8
-	VPADDD Y1, Y9, Y9
-	VPADDD Y2, Y10, Y10
-	VPADDD Y3, Y11, Y11
-	VPADDQ TWO, Y3, Y3
-
-	CMPQ CX, $384
-	JB   less_than_384
-
-	XOR_AVX2(DI, SI, 256, Y8, Y9, Y10, Y11, Y12, Y13)
-	SUBQ  $384, CX
-	TESTQ CX, CX
-	JE    done
-
-	ADDQ $384, SI
-	ADDQ $384, DI
-	JMP  between_0_and_64
-
-less_than_384:
-	XOR_UPPER_AVX2(DI, SI, 256, Y8, Y9, Y10, Y11, Y12, Y13)
-	EXTRACT_LOWER(BX, Y8, Y9, Y10, Y11, Y12)
-	ADDQ $320, SI
-	ADDQ $320, DI
-	SUBQ $320, CX
-	JMP  finalize
-
-between_192_and_320:
-	VMOVDQA Y0, Y4
-	VMOVDQA Y1, Y5
-	VMOVDQA Y2, Y6
-	VMOVDQA Y3, Y7
-	VMOVDQA Y0, Y8
-	VMOVDQA Y1, Y9
-	VMOVDQA Y2, Y10
-	VPADDQ  TWO, Y3, Y11
-
-	MOVQ DX, R9
-
-chacha_loop_256:
-	CHACHA_QROUND_AVX(Y4, Y5, Y6, Y7, Y13, Y14, Y15)
-	CHACHA_QROUND_AVX(Y8, Y9, Y10, Y11, Y13, Y14, Y15)
-	CHACHA_SHUFFLE_AVX(Y5, Y6, Y7)
-	CHACHA_SHUFFLE_AVX(Y9, Y10, Y11)
-	CHACHA_QROUND_AVX(Y4, Y5, Y6, Y7, Y13, Y14, Y15)
-	CHACHA_QROUND_AVX(Y8, Y9, Y10, Y11, Y13, Y14, Y15)
-	CHACHA_SHUFFLE_AVX(Y7, Y6, Y5)
-	CHACHA_SHUFFLE_AVX(Y11, Y10, Y9)
-	SUBQ $2, R9
-	JA   chacha_loop_256
-
-	VPADDD Y0, Y4, Y4
-	VPADDD Y1, Y5, Y5
-	VPADDD Y2, Y6, Y6
-	VPADDD Y3, Y7, Y7
-	VPADDQ TWO, Y3, Y3
-	XOR_AVX2(DI, SI, 0, Y4, Y5, Y6, Y7, Y12, Y13)
-	VPADDD Y0, Y8, Y8
-	VPADDD Y1, Y9, Y9
-	VPADDD Y2, Y10, Y10
-	VPADDD Y3, Y11, Y11
-	VPADDQ TWO, Y3, Y3
-
-	CMPQ CX, $256
-	JB   less_than_256
-
-	XOR_AVX2(DI, SI, 128, Y8, Y9, Y10, Y11, Y12, Y13)
-	SUBQ  $256, CX
-	TESTQ CX, CX
-	JE    done
-
-	ADDQ $256, SI
-	ADDQ $256, DI
-	JMP  between_0_and_64
-
-less_than_256:
-	XOR_UPPER_AVX2(DI, SI, 128, Y8, Y9, Y10, Y11, Y12, Y13)
-	EXTRACT_LOWER(BX, Y8, Y9, Y10, Y11, Y12)
-	ADDQ $192, SI
-	ADDQ $192, DI
-	SUBQ $192, CX
-	JMP  finalize
-
-between_64_and_192:
-	VMOVDQA Y0, Y4
-	VMOVDQA Y1, Y5
-	VMOVDQA Y2, Y6
-	VMOVDQA Y3, Y7
-
-	MOVQ DX, R9
-
-chacha_loop_128:
-	CHACHA_QROUND_AVX(Y4, Y5, Y6, Y7, Y13, Y14, Y15)
-	CHACHA_SHUFFLE_AVX(Y5, Y6, Y7)
-	CHACHA_QROUND_AVX(Y4, Y5, Y6, Y7, Y13, Y14, Y15)
-	CHACHA_SHUFFLE_AVX(Y7, Y6, Y5)
-	SUBQ $2, R9
-	JA   chacha_loop_128
-
-	VPADDD Y0, Y4, Y4
-	VPADDD Y1, Y5, Y5
-	VPADDD Y2, Y6, Y6
-	VPADDD Y3, Y7, Y7
-	VPADDQ TWO, Y3, Y3
-
-	CMPQ CX, $128
-	JB   less_than_128
-
-	XOR_AVX2(DI, SI, 0, Y4, Y5, Y6, Y7, Y12, Y13)
-	SUBQ  $128, CX
-	TESTQ CX, CX
-	JE    done
-
-	ADDQ $128, SI
-	ADDQ $128, DI
-	JMP  between_0_and_64
-
-less_than_128:
-	XOR_UPPER_AVX2(DI, SI, 0, Y4, Y5, Y6, Y7, Y12, Y13)
-	EXTRACT_LOWER(BX, Y4, Y5, Y6, Y7, Y13)
-	ADDQ $64, SI
-	ADDQ $64, DI
-	SUBQ $64, CX
-	JMP  finalize
-
-between_0_and_64:
-	VMOVDQA X0, X4
-	VMOVDQA X1, X5
-	VMOVDQA X2, X6
-	VMOVDQA X3, X7
-
-	MOVQ DX, R9
-
-chacha_loop_64:
-	CHACHA_QROUND_AVX(X4, X5, X6, X7, X13, X14, X15)
-	CHACHA_SHUFFLE_AVX(X5, X6, X7)
-	CHACHA_QROUND_AVX(X4, X5, X6, X7, X13, X14, X15)
-	CHACHA_SHUFFLE_AVX(X7, X6, X5)
-	SUBQ $2, R9
-	JA   chacha_loop_64
-
-	VPADDD  X0, X4, X4
-	VPADDD  X1, X5, X5
-	VPADDD  X2, X6, X6
-	VPADDD  X3, X7, X7
-	VMOVDQU ·one<>(SB), X0
-	VPADDQ  X0, X3, X3
-
-	CMPQ CX, $64
-	JB   less_than_64
-
-	XOR_AVX(DI, SI, 0, X4, X5, X6, X7, X13)
-	SUBQ $64, CX
-	JMP  done
-
-less_than_64:
-	VMOVDQU X4, 0(BX)
-	VMOVDQU X5, 16(BX)
-	VMOVDQU X6, 32(BX)
-	VMOVDQU X7, 48(BX)
-
-finalize:
-	XORQ R11, R11
-	XORQ R12, R12
-	MOVQ CX, BP
-
-xor_loop:
-	MOVB 0(SI), R11
-	MOVB 0(BX), R12
-	XORQ R11, R12
-	MOVB R12, 0(DI)
-	INCQ SI
-	INCQ BX
-	INCQ DI
-	DECQ BP
-	JA   xor_loop
-
-done:
-	VMOVDQU X3, 48(AX)
-	VZEROUPPER
-	MOVQ    R8, SP
-	MOVQ    CX, ret+72(FP)
-	RET
-

vendor/github.com/aead/chacha20/chacha/chacha_386.go

-// Copyright (c) 2016 Andreas Auernhammer. All rights reserved.
-// Use of this source code is governed by a license that can be
-// found in the LICENSE file.
-
-// +build 386,!gccgo,!appengine,!nacl
-
-package chacha
-
-import (
-	"encoding/binary"
-
-	"golang.org/x/sys/cpu"
-)
-
-func init() {
-	useSSE2 = cpu.X86.HasSSE2
-	useSSSE3 = cpu.X86.HasSSSE3
-	useAVX = false
-	useAVX2 = false
-}
-
-func initialize(state *[64]byte, key []byte, nonce *[16]byte) {
-	binary.LittleEndian.PutUint32(state[0:], sigma[0])
-	binary.LittleEndian.PutUint32(state[4:], sigma[1])
-	binary.LittleEndian.PutUint32(state[8:], sigma[2])
-	binary.LittleEndian.PutUint32(state[12:], sigma[3])
-	copy(state[16:], key[:])
-	copy(state[48:], nonce[:])
-}
-
-// This function is implemented in chacha_386.s
-//go:noescape
-func hChaCha20SSE2(out *[32]byte, nonce *[16]byte, key *[32]byte)
-
-// This function is implemented in chacha_386.s
-//go:noescape
-func hChaCha20SSSE3(out *[32]byte, nonce *[16]byte, key *[32]byte)
-
-// This function is implemented in chacha_386.s
-//go:noescape
-func xorKeyStreamSSE2(dst, src []byte, block, state *[64]byte, rounds int) int
-
-func hChaCha20(out *[32]byte, nonce *[16]byte, key *[32]byte) {
-	switch {
-	case useSSSE3:
-		hChaCha20SSSE3(out, nonce, key)
-	case useSSE2:
-		hChaCha20SSE2(out, nonce, key)
-	default:
-		hChaCha20Generic(out, nonce, key)
-	}
-}
-
-func xorKeyStream(dst, src []byte, block, state *[64]byte, rounds int) int {
-	if useSSE2 {
-		return xorKeyStreamSSE2(dst, src, block, state, rounds)
-	} else {
-		return xorKeyStreamGeneric(dst, src, block, state, rounds)
-	}
-}

vendor/github.com/aead/chacha20/chacha/chacha_386.s

-// Copyright (c) 2016 Andreas Auernhammer. All rights reserved.
-// Use of this source code is governed by a license that can be
-// found in the LICENSE file.
-
-// +build 386,!gccgo,!appengine,!nacl
-
-#include "const.s"
-#include "macro.s"
-
-// FINALIZE xors len bytes from src and block using
-// the temp. registers t0 and t1 and writes the result
-// to dst.
-#define FINALIZE(dst, src, block, len, t0, t1) \
-	XORL t0, t0;       \
-	XORL t1, t1;       \
-	FINALIZE_LOOP:;    \
-	MOVB 0(src), t0;   \
-	MOVB 0(block), t1; \
-	XORL t0, t1;       \
-	MOVB t1, 0(dst);   \
-	INCL src;          \
-	INCL block;        \
-	INCL dst;          \
-	DECL len;          \
-	JG   FINALIZE_LOOP \
-
-#define Dst DI
-#define Nonce AX
-#define Key BX
-#define Rounds DX
-
-// func hChaCha20SSE2(out *[32]byte, nonce *[16]byte, key *[32]byte)
-TEXT ·hChaCha20SSE2(SB), 4, $0-12
-	MOVL out+0(FP), Dst
-	MOVL nonce+4(FP), Nonce
-	MOVL key+8(FP), Key
-
-	MOVOU ·sigma<>(SB), X0
-	MOVOU 0*16(Key), X1
-	MOVOU 1*16(Key), X2
-	MOVOU 0*16(Nonce), X3
-	MOVL  $20, Rounds
-
-chacha_loop:
-	CHACHA_QROUND_SSE2(X0, X1, X2, X3, X4)
-	CHACHA_SHUFFLE_SSE(X1, X2, X3)
-	CHACHA_QROUND_SSE2(X0, X1, X2, X3, X4)
-	CHACHA_SHUFFLE_SSE(X3, X2, X1)
-	SUBL $2, Rounds
-	JNZ  chacha_loop
-
-	MOVOU X0, 0*16(Dst)
-	MOVOU X3, 1*16(Dst)
-	RET
-
-// func hChaCha20SSSE3(out *[32]byte, nonce *[16]byte, key *[32]byte)
-TEXT ·hChaCha20SSSE3(SB), 4, $0-12
-	MOVL out+0(FP), Dst
-	MOVL nonce+4(FP), Nonce
-	MOVL key+8(FP), Key
-
-	MOVOU ·sigma<>(SB), X0
-	MOVOU 0*16(Key), X1
-	MOVOU 1*16(Key), X2
-	MOVOU 0*16(Nonce), X3
-	MOVL  $20, Rounds
-
-	MOVOU ·rol16<>(SB), X5
-	MOVOU ·rol8<>(SB), X6
-
-chacha_loop:
-	CHACHA_QROUND_SSSE3(X0, X1, X2, X3, X4, X5, X6)
-	CHACHA_SHUFFLE_SSE(X1, X2, X3)
-	CHACHA_QROUND_SSSE3(X0, X1, X2, X3, X4, X5, X6)
-	CHACHA_SHUFFLE_SSE(X3, X2, X1)
-	SUBL $2, Rounds
-	JNZ  chacha_loop
-
-	MOVOU X0, 0*16(Dst)
-	MOVOU X3, 1*16(Dst)
-	RET
-
-#undef Dst
-#undef Nonce
-#undef Key
-#undef Rounds
-
-#define State AX
-#define Dst DI
-#define Src SI
-#define Len DX
-#define Tmp0 BX
-#define Tmp1 BP
-
-// func xorKeyStreamSSE2(dst, src []byte, block, state *[64]byte, rounds int) int
-TEXT ·xorKeyStreamSSE2(SB), 4, $0-40
-	MOVL dst_base+0(FP), Dst
-	MOVL src_base+12(FP), Src
-	MOVL state+28(FP), State
-	MOVL src_len+16(FP), Len
-	MOVL $0, ret+36(FP)       // Number of bytes written to the keystream buffer - 0 iff len mod 64 == 0
-
-	MOVOU 0*16(State), X0
-	MOVOU 1*16(State), X1
-	MOVOU 2*16(State), X2
-	MOVOU 3*16(State), X3
-	TESTL Len, Len
-	JZ    DONE
-
-GENERATE_KEYSTREAM:
-	MOVO X0, X4
-	MOVO X1, X5
-	MOVO X2, X6
-	MOVO X3, X7
-	MOVL rounds+32(FP), Tmp0
-
-CHACHA_LOOP:
-	CHACHA_QROUND_SSE2(X4, X5, X6, X7, X0)
-	CHACHA_SHUFFLE_SSE(X5, X6, X7)
-	CHACHA_QROUND_SSE2(X4, X5, X6, X7, X0)
-	CHACHA_SHUFFLE_SSE(X7, X6, X5)
-	SUBL $2, Tmp0
-	JA   CHACHA_LOOP
-
-	MOVOU 0*16(State), X0 // Restore X0 from state
-	PADDL X0, X4
-	PADDL X1, X5
-	PADDL X2, X6
-	PADDL X3, X7
-	MOVOU ·one<>(SB), X0
-	PADDQ X0, X3
-
-	CMPL Len, $64
-	JL   BUFFER_KEYSTREAM
-
-	XOR_SSE(Dst, Src, 0, X4, X5, X6, X7, X0)
-	MOVOU 0*16(State), X0    // Restore X0 from state
-	ADDL  $64, Src
-	ADDL  $64, Dst
-	SUBL  $64, Len
-	JZ    DONE
-	JMP   GENERATE_KEYSTREAM // There is at least one more plaintext byte
-
-BUFFER_KEYSTREAM:
-	MOVL  block+24(FP), State
-	MOVOU X4, 0(State)
-	MOVOU X5, 16(State)
-	MOVOU X6, 32(State)
-	MOVOU X7, 48(State)
-	MOVL  Len, ret+36(FP)     // Number of bytes written to the keystream buffer - 0 < Len < 64
-	FINALIZE(Dst, Src, State, Len, Tmp0, Tmp1)
-
-DONE:
-	MOVL  state+28(FP), State
-	MOVOU X3, 3*16(State)
-	RET
-
-#undef State
-#undef Dst
-#undef Src
-#undef Len
-#undef Tmp0
-#undef Tmp1

vendor/github.com/aead/chacha20/chacha/chacha_amd64.go

-// Copyright (c) 2017 Andreas Auernhammer. All rights reserved.
-// Use of this source code is governed by a license that can be
-// found in the LICENSE file.
-
-// +build go1.7,amd64,!gccgo,!appengine,!nacl
-
-package chacha
-
-import "golang.org/x/sys/cpu"
-
-func init() {
-	useSSE2 = cpu.X86.HasSSE2
-	useSSSE3 = cpu.X86.HasSSSE3
-	useAVX = cpu.X86.HasAVX
-	useAVX2 = cpu.X86.HasAVX2
-}
-
-// This function is implemented in chacha_amd64.s
-//go:noescape
-func initialize(state *[64]byte, key []byte, nonce *[16]byte)
-
-// This function is implemented in chacha_amd64.s
-//go:noescape
-func hChaCha20SSE2(out *[32]byte, nonce *[16]byte, key *[32]byte)
-
-// This function is implemented in chacha_amd64.s
-//go:noescape
-func hChaCha20SSSE3(out *[32]byte, nonce *[16]byte, key *[32]byte)
-
-// This function is implemented in chachaAVX2_amd64.s
-//go:noescape
-func hChaCha20AVX(out *[32]byte, nonce *[16]byte, key *[32]byte)
-
-// This function is implemented in chacha_amd64.s
-//go:noescape
-func xorKeyStreamSSE2(dst, src []byte, block, state *[64]byte, rounds int) int
-
-// This function is implemented in chacha_amd64.s
-//go:noescape
-func xorKeyStreamSSSE3(dst, src []byte, block, state *[64]byte, rounds int) int
-
-// This function is implemented in chacha_amd64.s
-//go:noescape
-func xorKeyStreamAVX(dst, src []byte, block, state *[64]byte, rounds int) int
-
-// This function is implemented in chachaAVX2_amd64.s
-//go:noescape
-func xorKeyStreamAVX2(dst, src []byte, block, state *[64]byte, rounds int) int
-
-func hChaCha20(out *[32]byte, nonce *[16]byte, key *[32]byte) {
-	switch {
-	case useAVX:
-		hChaCha20AVX(out, nonce, key)
-	case useSSSE3:
-		hChaCha20SSSE3(out, nonce, key)
-	case useSSE2:
-		hChaCha20SSE2(out, nonce, key)
-	default:
-		hChaCha20Generic(out, nonce, key)
-	}
-}
-
-func xorKeyStream(dst, src []byte, block, state *[64]byte, rounds int) int {
-	switch {
-	case useAVX2:
-		return xorKeyStreamAVX2(dst, src, block, state, rounds)
-	case useAVX:
-		return xorKeyStreamAVX(dst, src, block, state, rounds)
-	case useSSSE3:
-		return xorKeyStreamSSSE3(dst, src, block, state, rounds)
-	case useSSE2:
-		return xorKeyStreamSSE2(dst, src, block, state, rounds)
-	default:
-		return xorKeyStreamGeneric(dst, src, block, state, rounds)
-	}
-}

vendor/github.com/aead/chacha20/chacha/chacha_generic.go

-// Copyright (c) 2016 Andreas Auernhammer. All rights reserved.
-// Use of this source code is governed by a license that can be
-// found in the LICENSE file.
-
-package chacha
-
-import "encoding/binary"
-
-var sigma = [4]uint32{0x61707865, 0x3320646e, 0x79622d32, 0x6b206574}
-
-func xorKeyStreamGeneric(dst, src []byte, block, state *[64]byte, rounds int) int {
-	for len(src) >= 64 {
-		chachaGeneric(block, state, rounds)
-
-		for i, v := range block {
-			dst[i] = src[i] ^ v
-		}
-		src = src[64:]
-		dst = dst[64:]
-	}
-
-	n := len(src)
-	if n > 0 {
-		chachaGeneric(block, state, rounds)
-		for i, v := range src {
-			dst[i] = v ^ block[i]
-		}
-	}
-	return n
-}
-
-func chachaGeneric(dst *[64]byte, state *[64]byte, rounds int) {
-	v00 := binary.LittleEndian.Uint32(state[0:])
-	v01 := binary.LittleEndian.Uint32(state[4:])
-	v02 := binary.LittleEndian.Uint32(state[8:])
-	v03 := binary.LittleEndian.Uint32(state[12:])
-	v04 := binary.LittleEndian.Uint32(state[16:])
-	v05 := binary.LittleEndian.Uint32(state[20:])
-	v06 := binary.LittleEndian.Uint32(state[24:])
-	v07 := binary.LittleEndian.Uint32(state[28:])
-	v08 := binary.LittleEndian.Uint32(state[32:])
-	v09 := binary.LittleEndian.Uint32(state[36:])
-	v10 := binary.LittleEndian.Uint32(state[40:])
-	v11 := binary.LittleEndian.Uint32(state[44:])
-	v12 := binary.LittleEndian.Uint32(state[48:])
-	v13 := binary.LittleEndian.Uint32(state[52:])
-	v14 := binary.LittleEndian.Uint32(state[56:])
-	v15 := binary.LittleEndian.Uint32(state[60:])
-
-	s00, s01, s02, s03, s04, s05, s06, s07 := v00, v01, v02, v03, v04, v05, v06, v07
-	s08, s09, s10, s11, s12, s13, s14, s15 := v08, v09, v10, v11, v12, v13, v14, v15
-
-	for i := 0; i < rounds; i += 2 {
-		v00 += v04
-		v12 ^= v00
-		v12 = (v12 << 16) | (v12 >> 16)
-		v08 += v12
-		v04 ^= v08
-		v04 = (v04 << 12) | (v04 >> 20)
-		v00 += v04
-		v12 ^= v00
-		v12 = (v12 << 8) | (v12 >> 24)
-		v08 += v12
-		v04 ^= v08
-		v04 = (v04 << 7) | (v04 >> 25)
-		v01 += v05
-		v13 ^= v01
-		v13 = (v13 << 16) | (v13 >> 16)
-		v09 += v13
-		v05 ^= v09
-		v05 = (v05 << 12) | (v05 >> 20)
-		v01 += v05
-		v13 ^= v01
-		v13 = (v13 << 8) | (v13 >> 24)
-		v09 += v13
-		v05 ^= v09
-		v05 = (v05 << 7) | (v05 >> 25)
-		v02 += v06
-		v14 ^= v02
-		v14 = (v14 << 16) | (v14 >> 16)
-		v10 += v14
-		v06 ^= v10
-		v06 = (v06 << 12) | (v06 >> 20)
-		v02 += v06
-		v14 ^= v02
-		v14 = (v14 << 8) | (v14 >> 24)
-		v10 += v14
-		v06 ^= v10
-		v06 = (v06 << 7) | (v06 >> 25)
-		v03 += v07
-		v15 ^= v03
-		v15 = (v15 << 16) | (v15 >> 16)
-		v11 += v15
-		v07 ^= v11
-		v07 = (v07 << 12) | (v07 >> 20)
-		v03 += v07
-		v15 ^= v03
-		v15 = (v15 << 8) | (v15 >> 24)
-		v11 += v15
-		v07 ^= v11
-		v07 = (v07 << 7) | (v07 >> 25)
-		v00 += v05
-		v15 ^= v00
-		v15 = (v15 << 16) | (v15 >> 16)
-		v10 += v15
-		v05 ^= v10
-		v05 = (v05 << 12) | (v05 >> 20)
-		v00 += v05
-		v15 ^= v00
-		v15 = (v15 << 8) | (v15 >> 24)
-		v10 += v15
-		v05 ^= v10
-		v05 = (v05 << 7) | (v05 >> 25)
-		v01 += v06
-		v12 ^= v01
-		v12 = (v12 << 16) | (v12 >> 16)
-		v11 += v12
-		v06 ^= v11
-		v06 = (v06 << 12) | (v06 >> 20)
-		v01 += v06
-		v12 ^= v01
-		v12 = (v12 << 8) | (v12 >> 24)
-		v11 += v12
-		v06 ^= v11
-		v06 = (v06 << 7) | (v06 >> 25)
-		v02 += v07
-		v13 ^= v02
-		v13 = (v13 << 16) | (v13 >> 16)
-		v08 += v13
-		v07 ^= v08
-		v07 = (v07 << 12) | (v07 >> 20)
-		v02 += v07
-		v13 ^= v02
-		v13 = (v13 << 8) | (v13 >> 24)
-		v08 += v13
-		v07 ^= v08
-		v07 = (v07 << 7) | (v07 >> 25)
-		v03 += v04
-		v14 ^= v03
-		v14 = (v14 << 16) | (v14 >> 16)
-		v09 += v14
-		v04 ^= v09
-		v04 = (v04 << 12) | (v04 >> 20)
-		v03 += v04
-		v14 ^= v03
-		v14 = (v14 << 8) | (v14 >> 24)
-		v09 += v14
-		v04 ^= v09
-		v04 = (v04 << 7) | (v04 >> 25)
-	}
-
-	v00 += s00
-	v01 += s01
-	v02 += s02
-	v03 += s03
-	v04 += s04
-	v05 += s05
-	v06 += s06
-	v07 += s07
-	v08 += s08
-	v09 += s09
-	v10 += s10
-	v11 += s11
-	v12 += s12
-	v13 += s13
-	v14 += s14
-	v15 += s15
-
-	s12++
-	binary.LittleEndian.PutUint32(state[48:], s12)
-	if s12 == 0 { // indicates overflow
-		s13++
-		binary.LittleEndian.PutUint32(state[52:], s13)
-	}
-
-	binary.LittleEndian.PutUint32(dst[0:], v00)
-	binary.LittleEndian.PutUint32(dst[4:], v01)
-	binary.LittleEndian.PutUint32(dst[8:], v02)
-	binary.LittleEndian.PutUint32(dst[12:], v03)
-	binary.LittleEndian.PutUint32(dst[16:], v04)
-	binary.LittleEndian.PutUint32(dst[20:], v05)
-	binary.LittleEndian.PutUint32(dst[24:], v06)
-	binary.LittleEndian.PutUint32(dst[28:], v07)
-	binary.LittleEndian.PutUint32(dst[32:], v08)
-	binary.LittleEndian.PutUint32(dst[36:], v09)
-	binary.LittleEndian.PutUint32(dst[40:], v10)
-	binary.LittleEndian.PutUint32(dst[44:], v11)
-	binary.LittleEndian.PutUint32(dst[48:], v12)
-	binary.LittleEndian.PutUint32(dst[52:], v13)
-	binary.LittleEndian.PutUint32(dst[56:], v14)
-	binary.LittleEndian.PutUint32(dst[60:], v15)
-}
-
-func hChaCha20Generic(out *[32]byte, nonce *[16]byte, key *[32]byte) {
-	v00 := sigma[0]
-	v01 := sigma[1]
-	v02 := sigma[2]
-	v03 := sigma[3]
-	v04 := binary.LittleEndian.Uint32(key[0:])
-	v05 := binary.LittleEndian.Uint32(key[4:])
-	v06 := binary.LittleEndian.Uint32(key[8:])
-	v07 := binary.LittleEndian.Uint32(key[12:])
-	v08 := binary.LittleEndian.Uint32(key[16:])
-	v09 := binary.LittleEndian.Uint32(key[20:])
-	v10 := binary.LittleEndian.Uint32(key[24:])
-	v11 := binary.LittleEndian.Uint32(key[28:])
-	v12 := binary.LittleEndian.Uint32(nonce[0:])
-	v13 := binary.LittleEndian.Uint32(nonce[4:])
-	v14 := binary.LittleEndian.Uint32(nonce[8:])
-	v15 := binary.LittleEndian.Uint32(nonce[12:])
-
-	for i := 0; i < 20; i += 2 {
-		v00 += v04
-		v12 ^= v00
-		v12 = (v12 << 16) | (v12 >> 16)
-		v08 += v12
-		v04 ^= v08
-		v04 = (v04 << 12) | (v04 >> 20)
-		v00 += v04
-		v12 ^= v00
-		v12 = (v12 << 8) | (v12 >> 24)
-		v08 += v12
-		v04 ^= v08
-		v04 = (v04 << 7) | (v04 >> 25)
-		v01 += v05
-		v13 ^= v01
-		v13 = (v13 << 16) | (v13 >> 16)
-		v09 += v13
-		v05 ^= v09
-		v05 = (v05 << 12) | (v05 >> 20)
-		v01 += v05
-		v13 ^= v01
-		v13 = (v13 << 8) | (v13 >> 24)
-		v09 += v13
-		v05 ^= v09
-		v05 = (v05 << 7) | (v05 >> 25)
-		v02 += v06
-		v14 ^= v02
-		v14 = (v14 << 16) | (v14 >> 16)
-		v10 += v14
-		v06 ^= v10
-		v06 = (v06 << 12) | (v06 >> 20)
-		v02 += v06
-		v14 ^= v02
-		v14 = (v14 << 8) | (v14 >> 24)
-		v10 += v14
-		v06 ^= v10
-		v06 = (v06 << 7) | (v06 >> 25)
-		v03 += v07
-		v15 ^= v03
-		v15 = (v15 << 16) | (v15 >> 16)
-		v11 += v15
-		v07 ^= v11
-		v07 = (v07 << 12) | (v07 >> 20)
-		v03 += v07
-		v15 ^= v03
-		v15 = (v15 << 8) | (v15 >> 24)
-		v11 += v15
-		v07 ^= v11
-		v07 = (v07 << 7) | (v07 >> 25)
-		v00 += v05
-		v15 ^= v00
-		v15 = (v15 << 16) | (v15 >> 16)
-		v10 += v15
-		v05 ^= v10
-		v05 = (v05 << 12) | (v05 >> 20)
-		v00 += v05
-		v15 ^= v00
-		v15 = (v15 << 8) | (v15 >> 24)
-		v10 += v15
-		v05 ^= v10
-		v05 = (v05 << 7) | (v05 >> 25)
-		v01 += v06
-		v12 ^= v01
-		v12 = (v12 << 16) | (v12 >> 16)
-		v11 += v12
-		v06 ^= v11
-		v06 = (v06 << 12) | (v06 >> 20)
-		v01 += v06
-		v12 ^= v01
-		v12 = (v12 << 8) | (v12 >> 24)
-		v11 += v12
-		v06 ^= v11
-		v06 = (v06 << 7) | (v06 >> 25)
-		v02 += v07
-		v13 ^= v02
-		v13 = (v13 << 16) | (v13 >> 16)
-		v08 += v13
-		v07 ^= v08
-		v07 = (v07 << 12) | (v07 >> 20)
-		v02 += v07
-		v13 ^= v02
-		v13 = (v13 << 8) | (v13 >> 24)
-		v08 += v13
-		v07 ^= v08
-		v07 = (v07 << 7) | (v07 >> 25)
-		v03 += v04
-		v14 ^= v03
-		v14 = (v14 << 16) | (v14 >> 16)
-		v09 += v14
-		v04 ^= v09
-		v04 = (v04 << 12) | (v04 >> 20)
-		v03 += v04
-		v14 ^= v03
-		v14 = (v14 << 8) | (v14 >> 24)
-		v09 += v14
-		v04 ^= v09
-		v04 = (v04 << 7) | (v04 >> 25)
-	}
-
-	binary.LittleEndian.PutUint32(out[0:], v00)
-	binary.LittleEndian.PutUint32(out[4:], v01)
-	binary.LittleEndian.PutUint32(out[8:], v02)
-	binary.LittleEndian.PutUint32(out[12:], v03)
-	binary.LittleEndian.PutUint32(out[16:], v12)
-	binary.LittleEndian.PutUint32(out[20:], v13)
-	binary.LittleEndian.PutUint32(out[24:], v14)
-	binary.LittleEndian.PutUint32(out[28:], v15)
-}

vendor/github.com/aead/chacha20/chacha/chacha_ref.go

-// Copyright (c) 2016 Andreas Auernhammer. All rights reserved.
-// Use of this source code is governed by a license that can be
-// found in the LICENSE file.
-
-// +build !amd64,!386 gccgo appengine nacl
-
-package chacha
-
-import "encoding/binary"
-
-func init() {
-	useSSE2 = false
-	useSSSE3 = false
-	useAVX = false
-	useAVX2 = false
-}
-
-func initialize(state *[64]byte, key []byte, nonce *[16]byte) {
-	binary.LittleEndian.PutUint32(state[0:], sigma[0])
-	binary.LittleEndian.PutUint32(state[4:], sigma[1])
-	binary.LittleEndian.PutUint32(state[8:], sigma[2])
-	binary.LittleEndian.PutUint32(state[12:], sigma[3])
-	copy(state[16:], key[:])
-	copy(state[48:], nonce[:])
-}
-
-func xorKeyStream(dst, src []byte, block, state *[64]byte, rounds int) int {
-	return xorKeyStreamGeneric(dst, src, block, state, rounds)
-}
-
-func hChaCha20(out *[32]byte, nonce *[16]byte, key *[32]byte) {
-	hChaCha20Generic(out, nonce, key)
-}

vendor/github.com/aead/chacha20/chacha/const.s

-// Copyright (c) 2018 Andreas Auernhammer. All rights reserved.
-// Use of this source code is governed by a license that can be
-// found in the LICENSE file.
-
-// +build 386,!gccgo,!appengine,!nacl amd64,!gccgo,!appengine,!nacl
-
-#include "textflag.h"
-
-DATA ·sigma<>+0x00(SB)/4, $0x61707865
-DATA ·sigma<>+0x04(SB)/4, $0x3320646e
-DATA ·sigma<>+0x08(SB)/4, $0x79622d32
-DATA ·sigma<>+0x0C(SB)/4, $0x6b206574
-GLOBL ·sigma<>(SB), (NOPTR+RODATA), $16 // The 4 ChaCha initialization constants
-
-// SSE2/SSE3/AVX constants
-
-DATA ·one<>+0x00(SB)/8, $1
-DATA ·one<>+0x08(SB)/8, $0
-GLOBL ·one<>(SB), (NOPTR+RODATA), $16 // The constant 1 as 128 bit value
-
-DATA ·rol16<>+0x00(SB)/8, $0x0504070601000302
-DATA ·rol16<>+0x08(SB)/8, $0x0D0C0F0E09080B0A
-GLOBL ·rol16<>(SB), (NOPTR+RODATA), $16 // The PSHUFB 16 bit left rotate constant
-
-DATA ·rol8<>+0x00(SB)/8, $0x0605040702010003
-DATA ·rol8<>+0x08(SB)/8, $0x0E0D0C0F0A09080B
-GLOBL ·rol8<>(SB), (NOPTR+RODATA), $16 // The PSHUFB 8 bit left rotate constant
-
-// AVX2 constants
-
-DATA ·one_AVX2<>+0x00(SB)/8, $0
-DATA ·one_AVX2<>+0x08(SB)/8, $0
-DATA ·one_AVX2<>+0x10(SB)/8, $1
-DATA ·one_AVX2<>+0x18(SB)/8, $0
-GLOBL ·one_AVX2<>(SB), (NOPTR+RODATA), $32 // The constant 1 as 256 bit value
-
-DATA ·two_AVX2<>+0x00(SB)/8, $2
-DATA ·two_AVX2<>+0x08(SB)/8, $0
-DATA ·two_AVX2<>+0x10(SB)/8, $2
-DATA ·two_AVX2<>+0x18(SB)/8, $0
-GLOBL ·two_AVX2<>(SB), (NOPTR+RODATA), $32
-
-DATA ·rol16_AVX2<>+0x00(SB)/8, $0x0504070601000302
-DATA ·rol16_AVX2<>+0x08(SB)/8, $0x0D0C0F0E09080B0A
-DATA ·rol16_AVX2<>+0x10(SB)/8, $0x0504070601000302
-DATA ·rol16_AVX2<>+0x18(SB)/8, $0x0D0C0F0E09080B0A
-GLOBL ·rol16_AVX2<>(SB), (NOPTR+RODATA), $32 // The VPSHUFB 16 bit left rotate constant
-
-DATA ·rol8_AVX2<>+0x00(SB)/8, $0x0605040702010003
-DATA ·rol8_AVX2<>+0x08(SB)/8, $0x0E0D0C0F0A09080B
-DATA ·rol8_AVX2<>+0x10(SB)/8, $0x0605040702010003
-DATA ·rol8_AVX2<>+0x18(SB)/8, $0x0E0D0C0F0A09080B
-GLOBL ·rol8_AVX2<>(SB), (NOPTR+RODATA), $32 // The VPSHUFB 8 bit left rotate constant

vendor/github.com/aead/chacha20/chacha/macro.s

-// Copyright (c) 2018 Andreas Auernhammer. All rights reserved.
-// Use of this source code is governed by a license that can be
-// found in the LICENSE file.
-
-// +build 386,!gccgo,!appengine,!nacl amd64,!gccgo,!appengine,!nacl
-
-// ROTL_SSE rotates all 4 32 bit values of the XMM register v
-// left by n bits using SSE2 instructions (0 <= n <= 32).
-// The XMM register t is used as a temp. register.
-#define ROTL_SSE(n, t, v) \
-	MOVO  v, t;       \
-	PSLLL $n, t;      \
-	PSRLL $(32-n), v; \
-	PXOR  t, v
-
-// ROTL_AVX rotates all 4/8 32 bit values of the AVX/AVX2 register v
-// left by n bits using AVX/AVX2 instructions (0 <= n <= 32).
-// The AVX/AVX2 register t is used as a temp. register.
-#define ROTL_AVX(n, t, v) \
-	VPSLLD $n, v, t;      \
-	VPSRLD $(32-n), v, v; \
-	VPXOR  v, t, v
-
-// CHACHA_QROUND_SSE2 performs a ChaCha quarter-round using the
-// 4 XMM registers v0, v1, v2 and v3. It uses only ROTL_SSE2 for
-// rotations. The XMM register t is used as a temp. register.
-#define CHACHA_QROUND_SSE2(v0, v1, v2, v3, t) \
-	PADDL v1, v0;        \
-	PXOR  v0, v3;        \
-	ROTL_SSE(16, t, v3); \
-	PADDL v3, v2;        \
-	PXOR  v2, v1;        \
-	ROTL_SSE(12, t, v1); \
-	PADDL v1, v0;        \
-	PXOR  v0, v3;        \
-	ROTL_SSE(8, t, v3);  \
-	PADDL v3, v2;        \
-	PXOR  v2, v1;        \
-	ROTL_SSE(7, t, v1)
-
-// CHACHA_QROUND_SSSE3 performs a ChaCha quarter-round using the
-// 4 XMM registers v0, v1, v2 and v3. It uses PSHUFB for 8/16 bit
-// rotations. The XMM register t is used as a temp. register.
-//
-// r16 holds the PSHUFB constant for a 16 bit left rotate.
-// r8 holds the PSHUFB constant for a 8 bit left rotate.
-#define CHACHA_QROUND_SSSE3(v0, v1, v2, v3, t, r16, r8) \
-	PADDL  v1, v0;       \
-	PXOR   v0, v3;       \
-	PSHUFB r16, v3;      \
-	PADDL  v3, v2;       \
-	PXOR   v2, v1;       \
-	ROTL_SSE(12, t, v1); \
-	PADDL  v1, v0;       \
-	PXOR   v0, v3;       \
-	PSHUFB r8, v3;       \
-	PADDL  v3, v2;       \
-	PXOR   v2, v1;       \
-	ROTL_SSE(7, t, v1)
-
-// CHACHA_QROUND_AVX performs a ChaCha quarter-round using the
-// 4 AVX/AVX2 registers v0, v1, v2 and v3. It uses VPSHUFB for 8/16 bit
-// rotations. The AVX/AVX2 register t is used as a temp. register.
-//
-// r16 holds the VPSHUFB constant for a 16 bit left rotate.
-// r8 holds the VPSHUFB constant for a 8 bit left rotate.
-#define CHACHA_QROUND_AVX(v0, v1, v2, v3, t, r16, r8) \
-	VPADDD  v0, v1, v0;  \
-	VPXOR   v3, v0, v3;  \
-	VPSHUFB r16, v3, v3; \
-	VPADDD  v2, v3, v2;  \
-	VPXOR   v1, v2, v1;  \
-	ROTL_AVX(12, t, v1); \
-	VPADDD  v0, v1, v0;  \
-	VPXOR   v3, v0, v3;  \
-	VPSHUFB r8, v3, v3;  \
-	VPADDD  v2, v3, v2;  \
-	VPXOR   v1, v2, v1;  \
-	ROTL_AVX(7, t, v1)
-
-// CHACHA_SHUFFLE_SSE performs a ChaCha shuffle using the
-// 3 XMM registers v1, v2 and v3. The inverse shuffle is
-// performed by switching v1 and v3: CHACHA_SHUFFLE_SSE(v3, v2, v1).
-#define CHACHA_SHUFFLE_SSE(v1, v2, v3) \
-	PSHUFL $0x39, v1, v1; \
-	PSHUFL $0x4E, v2, v2; \
-	PSHUFL $0x93, v3, v3
-
-// CHACHA_SHUFFLE_AVX performs a ChaCha shuffle using the
-// 3 AVX/AVX2 registers v1, v2 and v3. The inverse shuffle is
-// performed by switching v1 and v3: CHACHA_SHUFFLE_AVX(v3, v2, v1).
-#define CHACHA_SHUFFLE_AVX(v1, v2, v3) \
-	VPSHUFD $0x39, v1, v1; \
-	VPSHUFD $0x4E, v2, v2; \
-	VPSHUFD $0x93, v3, v3
-
-// XOR_SSE extracts 4x16 byte vectors from src at
-// off, xors all vectors with the corresponding XMM
-// register (v0 - v3) and writes the result to dst
-// at off.
-// The XMM register t is used as a temp. register.
-#define XOR_SSE(dst, src, off, v0, v1, v2, v3, t) \
-	MOVOU 0+off(src), t;  \
-	PXOR  v0, t;          \
-	MOVOU t, 0+off(dst);  \
-	MOVOU 16+off(src), t; \
-	PXOR  v1, t;          \
-	MOVOU t, 16+off(dst); \
-	MOVOU 32+off(src), t; \
-	PXOR  v2, t;          \
-	MOVOU t, 32+off(dst); \
-	MOVOU 48+off(src), t; \
-	PXOR  v3, t;          \
-	MOVOU t, 48+off(dst)
-
-// XOR_AVX extracts 4x16 byte vectors from src at
-// off, xors all vectors with the corresponding AVX
-// register (v0 - v3) and writes the result to dst
-// at off.
-// The XMM register t is used as a temp. register.
-#define XOR_AVX(dst, src, off, v0, v1, v2, v3, t) \
-	VPXOR   0+off(src), v0, t;  \
-	VMOVDQU t, 0+off(dst);      \
-	VPXOR   16+off(src), v1, t; \
-	VMOVDQU t, 16+off(dst);     \
-	VPXOR   32+off(src), v2, t; \
-	VMOVDQU t, 32+off(dst);     \
-	VPXOR   48+off(src), v3, t; \
-	VMOVDQU t, 48+off(dst)
-
-#define XOR_AVX2(dst, src, off, v0, v1, v2, v3, t0, t1) \
-	VMOVDQU    (0+off)(src), t0;  \
-	VPERM2I128 $32, v1, v0, t1;   \
-	VPXOR      t0, t1, t0;        \
-	VMOVDQU    t0, (0+off)(dst);  \
-	VMOVDQU    (32+off)(src), t0; \
-	VPERM2I128 $32, v3, v2, t1;   \
-	VPXOR      t0, t1, t0;        \
-	VMOVDQU    t0, (32+off)(dst); \
-	VMOVDQU    (64+off)(src), t0; \
-	VPERM2I128 $49, v1, v0, t1;   \
-	VPXOR      t0, t1, t0;        \
-	VMOVDQU    t0, (64+off)(dst); \
-	VMOVDQU    (96+off)(src), t0; \
-	VPERM2I128 $49, v3, v2, t1;   \
-	VPXOR      t0, t1, t0;        \
-	VMOVDQU    t0, (96+off)(dst)
-
-#define XOR_UPPER_AVX2(dst, src, off, v0, v1, v2, v3, t0, t1) \
-	VMOVDQU    (0+off)(src), t0;  \
-	VPERM2I128 $32, v1, v0, t1;   \
-	VPXOR      t0, t1, t0;        \
-	VMOVDQU    t0, (0+off)(dst);  \
-	VMOVDQU    (32+off)(src), t0; \
-	VPERM2I128 $32, v3, v2, t1;   \
-	VPXOR      t0, t1, t0;        \
-	VMOVDQU    t0, (32+off)(dst); \
-
-#define EXTRACT_LOWER(dst, v0, v1, v2, v3, t0) \
-	VPERM2I128 $49, v1, v0, t0; \
-	VMOVDQU    t0, 0(dst);      \
-	VPERM2I128 $49, v3, v2, t0; \
-	VMOVDQU    t0, 32(dst)

vendor/github.com/aead/chacha20/chacha20.go

-// Copyright (c) 2016 Andreas Auernhammer. All rights reserved.
-// Use of this source code is governed by a license that can be
-// found in the LICENSE file.
-
-// Package chacha20 implements the ChaCha20 / XChaCha20 stream chipher.
-// Notice that one specific key-nonce combination must be unique for all time.
-//
-// There are three versions of ChaCha20:
-// - ChaCha20 with a 64 bit nonce (en/decrypt up to 2^64 * 64 bytes for one key-nonce combination)
-// - ChaCha20 with a 96 bit nonce (en/decrypt up to 2^32 * 64 bytes (~256 GB) for one key-nonce combination)
-// - XChaCha20 with a 192 bit nonce (en/decrypt up to 2^64 * 64 bytes for one key-nonce combination)
-package chacha20 // import "github.com/aead/chacha20"
-
-import (
-	"crypto/cipher"
-
-	"github.com/aead/chacha20/chacha"
-)
-
-// XORKeyStream crypts bytes from src to dst using the given nonce and key.
-// The length of the nonce determinds the version of ChaCha20:
-// - 8 bytes:  ChaCha20 with a 64 bit nonce and a 2^64 * 64 byte period.
-// - 12 bytes: ChaCha20 as defined in RFC 7539 and a 2^32 * 64 byte period.
-// - 24 bytes: XChaCha20 with a 192 bit nonce and a 2^64 * 64 byte period.
-// Src and dst may be the same slice but otherwise should not overlap.
-// If len(dst) < len(src) this function panics.
-// If the nonce is neither 64, 96 nor 192 bits long, this function panics.
-func XORKeyStream(dst, src, nonce, key []byte) {
-	chacha.XORKeyStream(dst, src, nonce, key, 20)
-}
-
-// NewCipher returns a new cipher.Stream implementing a ChaCha20 version.
-// The nonce must be unique for one key for all time.
-// The length of the nonce determinds the version of ChaCha20:
-// - 8 bytes:  ChaCha20 with a 64 bit nonce and a 2^64 * 64 byte period.
-// - 12 bytes: ChaCha20 as defined in RFC 7539 and a 2^32 * 64 byte period.
-// - 24 bytes: XChaCha20 with a 192 bit nonce and a 2^64 * 64 byte period.
-// If the nonce is neither 64, 96 nor 192 bits long, a non-nil error is returned.
-func NewCipher(nonce, key []byte) (cipher.Stream, error) {
-	return chacha.NewCipher(nonce, key, 20)
-}

vendor/github.com/alecthomas/template/LICENSE

-Copyright (c) 2012 The Go Authors. All rights reserved.
-
-Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions are
-met:
-
-   * Redistributions of source code must retain the above copyright
-notice, this list of conditions and the following disclaimer.
-   * Redistributions in binary form must reproduce the above
-copyright notice, this list of conditions and the following disclaimer
-in the documentation and/or other materials provided with the
-distribution.
-   * Neither the name of Google Inc. nor the names of its
-contributors may be used to endorse or promote products derived from
-this software without specific prior written permission.
-
-THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
-"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
-LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
-A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
-OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
-SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
-LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
-DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
-THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
-(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
-OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

vendor/github.com/alecthomas/template/helper.go

-// Copyright 2011 The Go Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style
-// license that can be found in the LICENSE file.
-
-// Helper functions to make constructing templates easier.
-
-package template
-
-import (
-	"fmt"
-	"io/ioutil"
-	"path/filepath"
-)
-
-// Functions and methods to parse templates.
-
-// Must is a helper that wraps a call to a function returning (*Template, error)
-// and panics if the error is non-nil. It is intended for use in variable
-// initializations such as
-//	var t = template.Must(template.New("name").Parse("text"))
-func Must(t *Template, err error) *Template {
-	if err != nil {
-		panic(err)
-	}
-	return t
-}
-
-// ParseFiles creates a new Template and parses the template definitions from
-// the named files. The returned template's name will have the (base) name and
-// (parsed) contents of the first file. There must be at least one file.
-// If an error occurs, parsing stops and the returned *Template is nil.
-func ParseFiles(filenames ...string) (*Template, error) {
-	return parseFiles(nil, filenames...)
-}
-
-// ParseFiles parses the named files and associates the resulting templates with
-// t. If an error occurs, parsing stops and the returned template is nil;
-// otherwise it is t. There must be at least one file.
-func (t *Template) ParseFiles(filenames ...string) (*Template, error) {
-	return parseFiles(t, filenames...)
-}
-
-// parseFiles is the helper for the method and function. If the argument
-// template is nil, it is created from the first file.
-func parseFiles(t *Template, filenames ...string) (*Template, error) {
-	if len(filenames) == 0 {
-		// Not really a problem, but be consistent.
-		return nil, fmt.Errorf("template: no files named in call to ParseFiles")
-	}
-	for _, filename := range filenames {
-		b, err := ioutil.ReadFile(filename)
-		if err != nil {
-			return nil, err
-		}
-		s := string(b)
-		name := filepath.Base(filename)
-		// First template becomes return value if not already defined,
-		// and we use that one for subsequent New calls to associate
-		// all the templates together. Also, if this file has the same name
-		// as t, this file becomes the contents of t, so
-		//  t, err := New(name).Funcs(xxx).ParseFiles(name)
-		// works. Otherwise we create a new template associated with t.
-		var tmpl *Template
-		if t == nil {
-			t = New(name)
-		}
-		if name == t.Name() {
-			tmpl = t
-		} else {
-			tmpl = t.New(name)
-		}
-		_, err = tmpl.Parse(s)
-		if err != nil {
-			return nil, err
-		}
-	}
-	return t, nil
-}
-
-// ParseGlob creates a new Template and parses the template definitions from the
-// files identified by the pattern, which must match at least one file. The
-// returned template will have the (base) name and (parsed) contents of the
-// first file matched by the pattern. ParseGlob is equivalent to calling
-// ParseFiles with the list of files matched by the pattern.
-func ParseGlob(pattern string) (*Template, error) {
-	return parseGlob(nil, pattern)
-}
-
-// ParseGlob parses the template definitions in the files identified by the
-// pattern and associates the resulting templates with t. The pattern is
-// processed by filepath.Glob and must match at least one file. ParseGlob is
-// equivalent to calling t.ParseFiles with the list of files matched by the
-// pattern.
-func (t *Template) ParseGlob(pattern string) (*Template, error) {
-	return parseGlob(t, pattern)
-}
-
-// parseGlob is the implementation of the function and method ParseGlob.
-func parseGlob(t *Template, pattern string) (*Template, error) {
-	filenames, err := filepath.Glob(pattern)
-	if err != nil {
-		return nil, err
-	}
-	if len(filenames) == 0 {
-		return nil, fmt.Errorf("template: pattern matches no files: %#q", pattern)
-	}
-	return parseFiles(t, filenames...)
-}

vendor/github.com/alecthomas/units/COPYING

-Copyright (C) 2014 Alec Thomas
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of
-this software and associated documentation files (the "Software"), to deal in
-the Software without restriction, including without limitation the rights to
-use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
-of the Software, and to permit persons to whom the Software is furnished to do
-so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

vendor/github.com/alecthomas/units/bytes.go

-package units
-
-// Base2Bytes is the old non-SI power-of-2 byte scale (1024 bytes in a kilobyte,
-// etc.).
-type Base2Bytes int64
-
-// Base-2 byte units.
-const (
-	Kibibyte Base2Bytes = 1024
-	KiB                 = Kibibyte
-	Mebibyte            = Kibibyte * 1024
-	MiB                 = Mebibyte
-	Gibibyte            = Mebibyte * 1024
-	GiB                 = Gibibyte
-	Tebibyte            = Gibibyte * 1024
-	TiB                 = Tebibyte
-	Pebibyte            = Tebibyte * 1024
-	PiB                 = Pebibyte
-	Exbibyte            = Pebibyte * 1024
-	EiB                 = Exbibyte
-)
-
-var (
-	bytesUnitMap    = MakeUnitMap("iB", "B", 1024)
-	oldBytesUnitMap = MakeUnitMap("B", "B", 1024)
-)
-
-// ParseBase2Bytes supports both iB and B in base-2 multipliers. That is, KB
-// and KiB are both 1024.
-func ParseBase2Bytes(s string) (Base2Bytes, error) {
-	n, err := ParseUnit(s, bytesUnitMap)
-	if err != nil {
-		n, err = ParseUnit(s, oldBytesUnitMap)
-	}
-	return Base2Bytes(n), err
-}
-
-func (b Base2Bytes) String() string {
-	return ToString(int64(b), 1024, "iB", "B")
-}
-
-var (
-	metricBytesUnitMap = MakeUnitMap("B", "B", 1000)
-)
-
-// MetricBytes are SI byte units (1000 bytes in a kilobyte).
-type MetricBytes SI
-
-// SI base-10 byte units.
-const (
-	Kilobyte MetricBytes = 1000
-	KB                   = Kilobyte
-	Megabyte             = Kilobyte * 1000
-	MB                   = Megabyte
-	Gigabyte             = Megabyte * 1000
-	GB                   = Gigabyte
-	Terabyte             = Gigabyte * 1000
-	TB                   = Terabyte
-	Petabyte             = Terabyte * 1000
-	PB                   = Petabyte
-	Exabyte              = Petabyte * 1000
-	EB                   = Exabyte
-)
-
-// ParseMetricBytes parses base-10 metric byte units. That is, KB is 1000 bytes.
-func ParseMetricBytes(s string) (MetricBytes, error) {
-	n, err := ParseUnit(s, metricBytesUnitMap)
-	return MetricBytes(n), err
-}
-
-func (m MetricBytes) String() string {
-	return ToString(int64(m), 1000, "B", "B")
-}
-
-// ParseStrictBytes supports both iB and B suffixes for base 2 and metric,
-// respectively. That is, KiB represents 1024 and KB represents 1000.
-func ParseStrictBytes(s string) (int64, error) {
-	n, err := ParseUnit(s, bytesUnitMap)
-	if err != nil {
-		n, err = ParseUnit(s, metricBytesUnitMap)
-	}
-	return int64(n), err
-}

vendor/github.com/alecthomas/units/doc.go

-// Package units provides helpful unit multipliers and functions for Go.
-//
-// The goal of this package is to have functionality similar to the time [1] package.
-//
-//
-// [1] http://golang.org/pkg/time/
-//
-// It allows for code like this:
-//
-//     n, err := ParseBase2Bytes("1KB")
-//     // n == 1024
-//     n = units.Mebibyte * 512
-package units

vendor/github.com/alecthomas/units/si.go

-package units
-
-// SI units.
-type SI int64
-
-// SI unit multiples.
-const (
-	Kilo SI = 1000
-	Mega    = Kilo * 1000
-	Giga    = Mega * 1000
-	Tera    = Giga * 1000
-	Peta    = Tera * 1000
-	Exa     = Peta * 1000
-)
-
-func MakeUnitMap(suffix, shortSuffix string, scale int64) map[string]float64 {
-	return map[string]float64{
-		shortSuffix:  1,
-		"K" + suffix: float64(scale),
-		"M" + suffix: float64(scale * scale),
-		"G" + suffix: float64(scale * scale * scale),
-		"T" + suffix: float64(scale * scale * scale * scale),
-		"P" + suffix: float64(scale * scale * scale * scale * scale),
-		"E" + suffix: float64(scale * scale * scale * scale * scale * scale),
-	}
-}

vendor/github.com/cenkalti/backoff/LICENSE

-The MIT License (MIT)
-
-Copyright (c) 2014 Cenk Altı
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of
-this software and associated documentation files (the "Software"), to deal in
-the Software without restriction, including without limitation the rights to
-use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
-the Software, and to permit persons to whom the Software is furnished to do so,
-subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
-FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
-COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
-IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
-CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

vendor/github.com/cenkalti/backoff/tries.go

-package backoff
-
-import "time"
-
-/*
-WithMaxRetries creates a wrapper around another BackOff, which will
-return Stop if NextBackOff() has been called too many times since
-the last time Reset() was called
-
-Note: Implementation is not thread-safe.
-*/
-func WithMaxRetries(b BackOff, max uint64) BackOff {
-	return &backOffTries{delegate: b, maxTries: max}
-}
-
-type backOffTries struct {
-	delegate BackOff
-	maxTries uint64
-	numTries uint64
-}
-
-func (b *backOffTries) NextBackOff() time.Duration {
-	if b.maxTries > 0 {
-		if b.maxTries <= b.numTries {
-			return Stop
-		}
-		b.numTries++
-	}
-	return b.delegate.NextBackOff()
-}
-
-func (b *backOffTries) Reset() {
-	b.numTries = 0
-	b.delegate.Reset()
-}

vendor/github.com/codahale/aesnicheck/asm_amd64.s

-// func HasAESNI() bool
-TEXT ·HasAESNI(SB),$0
-	XORQ AX, AX
-	INCL AX
-	CPUID
-	SHRQ $25, CX
-	ANDQ $1, CX
-	MOVB CX, ret+0(FP)
-	RET

vendor/github.com/codahale/aesnicheck/check_asm.go

-// +build amd64
-
-package aesnicheck
-
-// HasAESNI returns whether AES-NI is supported by the CPU.
-func HasAESNI() bool