Tag Info

AES-GCM falls category A5 in the paper. In AES-GCM doesn't support $\texttt{no-AAD}$, even you don't use AAD during encryption, AES-GCM convert his as a $\texttt{zero-length-AAD}$. See in the NIST Special Publication 800-38d, page 15; Algorithm 4: $GCM-AE_K (IV, P, A)$ … 4. Let $u = 128\cdot\lceil\operatorname{len}(C)/128\rceil - \operatorname{len}(C)$ and ...