CBC is Cipher Block Chaining. I think you might be referencing that the incorrect use of CBC leads to chosen-plaintext attacks, chosen-ciphertext attacks, or p

CBC is Cipher Block Chaining. I think you might be referencing that the incorrect use of CBC leads to chosen-plaintext attacks, chosen-ciphertext attacks, or padding oracle attacks. GCM is AEAD, providing ciphertext authentication. [1] For those reasons that you mention, use of encryption should always have a design review. [1] https://en.wikipedia.org/wiki/Authenticated_encryption#Authenticated_encryption_with_associated_data_(AEAD) https://en.wikipedia.org/wiki/Authenticated_encryption#Authe...