Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS. - Hanno Böck; Aaron Zauner; Sean Devlin; Juraj Somorovsky; Philipp Jovanovic (IACR Cryptol. ePrint Arch., 2016)