Loading CryptoViz...
Loading page content...Loading CryptoViz...
Loading page content...Authenticated encryption (AEAD): AES in counter mode for confidentiality plus a GHASH authentication tag for integrity. Used by TLS 1.3 and WireGuard — flipping a single ciphertext byte makes tag verification fail.
Imported traces are validated and replayed locally. They never run a cipher operation automatically.
Seal a message, flip one ciphertext byte, then decrypt. GCM verifies the GHASH tag first, so any change is rejected instead of silently returning corrupted plaintext.
Continue your cryptography learning path
A simple stream cipher performing byte-wise XOR operations between plaintext and key.
An unbreakable cipher when used with a truly random, single-use key of equal length to the plaintext.
Data Encryption Standard. A legacy 64-bit block cipher utilizing a 56-bit key size.
Related Resources