60.4.4 Galois/Counter Mode (GCM)