7.2.4.4 Galois/Counter Mode (GCM)