The Wikipedia article on GCM says GCM can take full advantage of parallel processing.

I had thought GCM uses a random IV for the first block, then for the second block uses the results of encrypting the previous block as the IV. If this is correct, how can it possibly be done in parallel?

The question boils down to which of these statements is wrong, and why?

  • $\begingroup$ Does this answer answer your question? $\endgroup$
    – SEJPM
    Commented Sep 12, 2018 at 18:45
  • $\begingroup$ @SEJPM Yeah. Same question.... I'm deleting mine. Thanks! $\endgroup$
    – kmort
    Commented Sep 12, 2018 at 18:47
  • $\begingroup$ No, please don't delete. I'll mark it as a duplicate so others who can find your wording easier (using a search machine) will be redirected! $\endgroup$
    – SEJPM
    Commented Sep 12, 2018 at 18:49


Browse other questions tagged or ask your own question.