AES-GCM
AES-GCM Nonce Reuse: Detection and Mitigation of Cryptographic Failures
AES-GCM nonce reuse enables complete cryptographic compromise through forbidden attacks that recover authentication keys and forge arbitrary ciphertexts via polynomial interpolation in finite fields.