8 ms·Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS2 points by osivertsson 10y ago