2 ms·Its worse than that with AES-GCM, nonce reuse reveals the AES private key.by throwaway2048 8y agoIts worse than that with AES-GCM, nonce reuse reveals the AES private key.