Initialization Vectors must be 12 octets.
During encryption, if IV is unspecified, it is constructed with two parts:
64-bit random number, generated each time a private key instance is constructed;
32-bit counter starting from zero.
During decryption, quality of IV is not automatically checked.
Since the security of AES-GCM depends on having unique IVs, the application should check IV
uniqueness with CounterIvChecker.
AES-GCM encryption algorithm.
Remarks
Initialization Vectors must be 12 octets. During encryption, if IV is unspecified, it is constructed with two parts:
During decryption, quality of IV is not automatically checked. Since the security of AES-GCM depends on having unique IVs, the application should check IV uniqueness with CounterIvChecker.