# Tag Info

This is one of the most poorly written "mainstream" crypto papers I've read. Sorry, McGrew and Viega. Field representation and bit order GCM works in the binary field $GF(2^{128})$. Elements of this field can be represented as polynomials with binary coefficients (i.e. 0 or 1). Using the notation of the paper, here are some examples of field elements: $1$...