When encrypting many short plaintexts with a single key, lets say about 2^64 total plaintexts at under 64 bytes each: (edit note - was 2^70 in the original question)
- Is there a way to use AES-GCM, as specified by NIST Special Publication 800-38D, safely in this scenario?
- Is is safe to use when there are no IV collisions, e.g when the IV is a counter?
- Is it possible to use a larger IV while still adhering to the NIST specs, possibly large enough to collisions even with random IVs?
Does this change if the plaintexts are high-entropy, for example when wrapping keys?