GCM

GCM is a block cipher mode that combines counter-mode encryption with a Galois-field authentication tag, making it an AEAD mode. AES-GCM is the dominant cipher suite in TLS today because it is fast, parallelizable, and hardware-accelerated on modern CPUs. Its one sharp edge is that reusing a nonce with the same key destroys its security guarantees.