aes gcm vulnerabilities - SERP Analysis

https://crypto.stackexchange.com/questions/18420/disadvantage-aes-gcm

https://soatok.blog/2020/05/13/why-aes-gcm-sucks/

https://www.elttam.com/blog/key-recovery-attacks-on-gcm/

https://security.snyk.io/vuln/SNYK-RUST-AESGCM-5916453

https://nvd.nist.gov/vuln/detail/CVE-2023-42811

https://www.dell.com/support/kbdoc/en-us/000212095/dsa-2023-121-dell-cloudlink-security-update-for-aes-gcm-ciphers-vulnerability

https://csrc.nist.gov/csrc/media/Events/2023/third-workshop-on-block-cipher-modes-of-operation/documents/accepted-papers/Practical%20Challenges%20with%20AES-GCM.pdf

https://security.snyk.io/package/cargo/aes-gcm

https://www.cvedetails.com/version/1633347/Aes-gcm-Project-Aes-gcm-0.10.1.html

https://news.ycombinator.com/item?id=36623082

https://medium.com/%40thomas_40553/how-to-secure-encrypt-and-decrypt-data-within-the-browser-with-aes-gcm-and-pbkdf2-057b839c96b6

https://www.hkcert.org/security-bulletin/openssh-aes-gcm-memory-corruption-vulnerability

https://www.meterian.io/components/rust/aes-gcm/0.4.0/

https://www.tenable.com/plugins/nessus/70895

https://www.cvedetails.com/version/1633349/Aes-gcm-Project-Aes-gcm-0.10.3.html

https://security.stackexchange.com/questions/184305/why-would-i-ever-use-aes-256-cbc-if-aes-256-gcm-is-more-secure

https://www.reddit.com/r/crypto/comments/giw4wz/why_aesgcm_sucks/

https://advisories.gitlab.com/pkg/gem/encryptor/GMS-2016-16/

https://quickview.cloudapps.cisco.com/quickview/bug/CSCvv46868

https://support.google.com/faqs/answer/10046138?hl=en

https://soatok.blog/tag/aes-gcm/

https://news.ycombinator.com/item?id=40653125

https://engineering.linecorp.com/en/blog/AES-GCM-SIV-optimization

https://stackoverflow.com/questions/57909395/sonarqube-make-sure-that-encrypting-data-is-safe-here-aes-gcm-nopadding-rsa-e

https://www.reddit.com/r/cryptography/comments/roa9hg/i_have_some_questions_about_using_aes_256/

https://community.bitwarden.com/t/is-aes-cbc-vulnerable/56681

https://stackoverflow.com/questions/36760973/why-is-random-iv-fine-for-aes-cbc-but-not-for-aes-gcm

https://github.com/Shay-Gueron/AES-GCM-SIV

https://learn.microsoft.com/en-us/answers/questions/2150310/how-to-implement-aes-gcm-256-bytes-with-key-iv-but

https://live.paloaltonetworks.com/t5/globalprotect-discussions/which-is-the-best-quot-aes-128-cbc-quot-or-quot-aes-256-gcm-quot/td-p/357856

https://www.usenix.org/system/files/conference/woot16/woot16-paper-bock.pdf

https://github.com/Legrandin/pycryptodome/issues/482

https://www.kiteworks.com/risk-compliance-glossary/aes-256-encryption/

https://medium.com/asecuritysite-when-bob-met-alice/why-is-aes-gcm-good-and-not-so-good-for-cybersecurity-28b583bbbbd3

https://en.wikipedia.org/wiki/Advanced_Encryption_Standard

https://icmconference.org/wp-content/uploads/G20a-Gouchet.pdf

https://eprint.iacr.org/2024/051.pdf

https://csrc.nist.rip/groups/ST/toolkit/BCM/documents/proposedmodes/gcm/gcm-spec.pdf

https://www.slideshare.net/slideshow/aesgcm-common-pitfalls-and-how-to-work-around-thempptx/252684624

https://www.linkedin.com/pulse/building-secure-aes-gcm-library-golang-transferring-nonces-hinch

https://blog.trailofbits.com/2024/07/12/announcing-aes-gem-aes-with-galois-extended-mode/

https://vuldb.com/?id.251640

https://certes.ai/wp-content/uploads/2025/03/Certes-WP-Understanding-Certes-DPRM-AES-256-GCM-and-Quantum-Based-Multi-Part-Key-in-the-Context-of-NIST-PQC-Compliance.pdf

https://docs.nordicsemi.com/bundle/ncs-2.3.0/page/nrf/samples/crypto/aes_gcm/README.html

https://cydrill.com/devops/encryption-with-aes/

https://www.researchgate.net/publication/260402083_Authentication_weakness_in_GCM

https://help.fluidattacks.com/portal/en/kb/articles/criteria-fixes-java-265

https://community.f5.com/kb/technicalarticles/cipher-suite-practices-and-pitfalls/291127

https://docs.ostorlab.co/kb/CRYPTO_INSECURE_CIPHER_MODE/index.html

https://stackered.com/blog/iv-mishandling/

https://www.netspi.com/blog/technical-blog/adversary-simulation/cve-2024-28989-weak-encryption-key-management-solar-winds-web-help-desk/

https://www.quora.com/Using-AES-256-GCM-is-your-security-only-128-bits-when-solely-relying-on-the-MAC

https://www.enterprisesecuritytech.com/post/whatsapp-s-security-audit-uncovers-key-vulnerabilities-in-data-encryption-and-privacy-protocols-meta

https://success.qualys.com/discussions/s/question/0D52L00004Tnv4PSAR/chrome-modern-vs-obsolete-crytography

https://community.veracode.com/s/question/0D53n00007tzEjZCAU/resolving-cwe327-use-of-a-broken-or-risky-cryptographic-algorithm

https://securance.com/news/common-cryptographic-vulnerabilities

https://homes.cs.washington.edu/~tessaro/papers/BHT17.pdf

https://www.ubiqsecurity.com/128bit-or-256bit-encryption-which-to-use/

https://www.beyondsecurity.com/resources/vulnerabilities/ssl-rc4-cipher-suites-supported

https://ciphersuite.info/cs/TLS_DHE_RSA_WITH_AES_256_GCM_SHA384/

https://www.usenix.org/conference/usenixsecurity22/presentation/albertini

https://www.fortra.com/resources/vulnerabilities/ssl-rc4-cipher-suites-supported

https://dev.to/js402/go-aes-gcm-a-security-deep-dive-3ec8

https://www.zerotier.com/blog/research-notes-aes-gmac-ctr-siv/

https://eprint.iacr.org/2018/1088.pdf

https://users.rust-lang.org/t/which-crate-to-use-for-aes/35280

https://community.st.com/t5/stm32-mcus-security/nucleo-f439zi-aes-in-gcm-mode-accelerator-struggles/td-p/705910

https://www.nature.com/articles/s41598-025-86118-4

https://www.researchgate.net/publication/324645752_Performance_comparison_of_AES-GCM-SIV_and_AES-GCM_algorithms_for_authenticated_encryption_on_FPGA_platforms

https://www.cs.purdue.edu/homes/jblocki/courses/655_Spring23/slides/Week2.pdf

https://cloud-ci.sgs.com/sonar/coding_rules?open=java%3AS6432&rule_key=java%3AS6432

https://www.quora.com/What-is-the-difference-between-AES-GCM-and-AES-CBC

https://docs.ostorlab.co/kb/CRYPTO_INSECURE_CIPHER_ALGO/index.html

https://docs.nordicsemi.com/bundle/ncs-1.7.1/page/nrf/samples/crypto/aes_gcm/README.html

https://asecuritysite.com/blog/2023-07-15_Why-Is-AES-GCM-Good--and-Not-So-Good--for-Cybersecurity---28b583bbbbd3.html

https://docs.guardrails.io/docs/vulnerabilities/java/insecure_use_of_crypto

https://learn.microsoft.com/en-us/dotnet/standard/security/vulnerabilities-cbc-mode

https://www.meterian.io/vulns?id=4cd577ea-9e83-3bc3-bc90-0953db34f95f&date=2025/06/05

https://www.sciencedirect.com/science/article/pii/S0166218X1630484X

https://www.youtube.com/watch?v=Gtfr1dBGzHg

https://community.ui.com/questions/Unifi-Security-Gateway-Security-Vulnerabilities-SWEET32-and-RC4-Bar-Mitzvah/70eb21ab-5858-4e64-9a10-8e699d03b674

https://www.php.net/manual/en/function.sodium-crypto-aead-aes256gcm-is-available.php

https://www.openssh.com/txt/gcmrekey.adv

https://ieeexplore.ieee.org/document/10366418/

https://www.devglan.com/online-tools/aes-encryption-decryption

https://frereit.de/aes_gcm/

https://community.mendix.com/link/space/security/questions/92656

https://pulsesecurity.co.nz/articles/dotnet-padding-oracles

https://cosicdatabase.esat.kuleuven.be/backend/publications/files/conferencepaper/2825

https://www.sharesecure.link/articles/the-ultimate-developers-guide-to-aes-gcm-encryption-with-web-cryptography-api

https://threatprotect.qualys.com/2020/03/02/aes-gcm-bug-in-the-firmware-of-googles-titan-m-chip-cve-2019-9465/

https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05

https://en.wikipedia.org/wiki/Transport_Layer_Security

https://deepsource.com/directory/java/issues/JAVA-S1004

https://www.linkedin.com/posts/pravallika-yakkala_understanding-aes-encryption-and-aesgcm-activity-7229163389598502912-Z2A3

https://www.youtube.com/watch?v=uxuXFK5XKEU

https://www.geeksforgeeks.org/block-cipher-modes-of-operation/

https://ciphersuite.info/cs/TLS_RSA_WITH_AES_256_GCM_SHA384/

https://www.openssh.com/releasenotes.html

https://developer.android.com/privacy-and-security/keystore