2 ms·Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS2 points by chetanahuja 10y ago