3 ms·Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS [pdf]2 points by aethertap 10y ago