AES-GCM and breaking it on nonce reuse
frereit.de