Normal AES-GCM generates an authentication tag at the end of encryption. I want to decrypt it while it is still being encrypted. This would be useful to send, encrypt, receive and decrypt a large file (for example) in one go.
This would also be useful for other things like for video streams or encrypted calls. How could I do that? Switching to CBC seems like a bad idea.