3 ms·Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS1 points by chetanahuja 10y ago