Boosting this one. For our application the Streaming case is really important. GCM can be done in streaming mode. I do think the only consideration is that the nonce should be different in each block. Partially computed MAC can be tracked in each call and have a final computation of the auth tag at the end. That is at least how Windows CNG is doing it currently.
Topic:
Privacy & Security
SubTopic:
General
Tags: