libgocryptfs: update to gocryptfs v2.3.1

internal/siv_aead/siv_aead.go

@@ -6,7 +6,7 @@ import (
 	"crypto/cipher"
 	"log"
 
-	"github.com/jacobsa/crypto/siv"
+	"github.com/aperturerobotics/jacobsa-crypto/siv"
 )
 
 type sivAead struct {
@@ -63,7 +63,7 @@ func (s *sivAead) Seal(dst, nonce, plaintext, authData []byte) []byte {
 	if len(s.key) == 0 {
 		log.Panic("Key has been wiped?")
 	}
-	// https://github.com/jacobsa/crypto/blob/master/siv/encrypt.go#L48:
+	// https://github.com/aperturerobotics/jacobsa-crypto/blob/master/siv/encrypt.go#L48:
 	// As per RFC 5297 section 3, you may use this function for nonce-based
 	// authenticated encryption by passing a nonce as the last associated
 	// data element.

internal/stupidgcm/doc.go

@@ -33,7 +33,7 @@
 // Corrupt ciphertexts never cause a panic. Instead, ErrAuth is returned on
 // decryption.
 //
-// XChaCha20-Poly1305
+// # XChaCha20-Poly1305
 //
 // The XChaCha20-Poly1305 implementation is more complicated than the others,
 // because OpenSSL does not support XChaCha20-Poly1305 directly. Follow

internal/stupidgcm/prefer.go

@@ -11,8 +11,8 @@ import (
 //
 // Go GCM is only faster if the CPU either:
 //
-// 1) Is X86_64 && has AES instructions && Go is v1.6  or higher
-// 2) Is ARM64  && has AES instructions && Go is v1.11 or higher
+//  1. Is X86_64 && has AES instructions && Go is v1.6  or higher
+//  2. Is ARM64  && has AES instructions && Go is v1.11 or higher
 //     (commit https://github.com/golang/go/commit/4f1f503373cda7160392be94e3849b0c9b9ebbda)
 //
 // See https://github.com/rfjakob/gocryptfs/wiki/CPU-Benchmarks