2 questions about nonce usage in GCM:
- Is it safe to use non-random nonce in GCM? Say I use 0x1 for m1, 0x2 for m2, so on.
- How much should a nonce increased for a file? Say I use 0x1000 as a nonce to encrypt a 1000x block size file (128,000bits). Then should the next safe nonce to use for the next file be simply 0x1001, or after addition of the number of blocks used, i.e. 0x2000?