~/moritzsamrock_

AES-GCM

AES-GCM: Authenticated encryption mode that combines confidentiality and integrity. The term is relevant for the assessment and design of modern security architecturesSecurity ArchitectureThe structured design of security controls, trust boundaries, data flows, and operational responsibilities. and should be applied within the respective technical and organizational context.

How it works and where it fits

The security of AES-GCM comes from the combination of algorithm, parameters, keys, protocol, and implementation. A mathematically strong primitive can be defeated by an unsuitable mode, weak randomness, incorrect certificate validation, or exposed keys. The intended objective must therefore be explicit: confidentiality, integrity, authenticity, or non-repudiation.

Practical security relevance

In practice, key and certificate management is often more decisive than algorithm choice alone. Generation, storage, distribution, rotation, revocation, and destruction require defined controls and monitoring. Compatible parameters, maintained libraries, migration capability, and a response process for compromised keys are also necessary; proprietary cryptographic constructions should be avoided.

  • EncryptionEncryptionConverts plaintext into unreadable ciphertext using a key.: Converts plaintext into unreadable ciphertext using a key.
  • Block CipherBlock CipherSymmetric encryption method that processes data in fixed-length blocks.: Symmetric encryption method that processes data in fixed-length blocks.
  • NonceNonceA value intended for use only once in a cryptographic context.: A value intended for use only once in a cryptographic context.
  • Message Authentication CodeMessage Authentication CodeCryptographic checksum used to ensure the integrity and authenticity of a message.: Cryptographic checksum used to ensure the integrity and authenticity of a message.

Related terms