59.4.7 Galois/Counter Mode (GCM)