· 9 min read
Encryption isn’t enough. Where matters too.
AES-GCM stops anyone from forging or altering your ciphertexts. It does not stop them from moving a valid one somewhere else. A concrete attack, the one parameter that fixes it, a test that keeps it fixed, and what is left to protect once it is.