On: AES-GCM and breaking it on nonce reuse

[Raed667]

I made an entire "game" based on this concept (AES CTR though) https://aes-cpa.fly.dev/

[hifromwork → Raed667]

For anyone interested, I made a few more:

* https://ctr.var.tailcall.net/

* https://ecb.var.tailcall.net/

* https://cbc.var.tailcall.net/

The goal is a bit different (I use them when teaching university courses, to show that encryption is not authentication), but the same ideas apply.