Skip to main content
All glossary terms

Credentials & security

AES-256-GCM

AES-256-GCM is an authenticated-encryption mode that uses AES with a 256-bit key to protect data confidentiality and integrity. It produces ciphertext and an authentication tag; correct implementations must use a unique nonce for each encryption under the same key.

Also known as AES-GCM.

Why it matters in practice

The algorithm provides a cryptographic primitive, not a complete key-storage or access-control design. Nonce management, key rotation, validation of the authentication tag, and safe error handling are essential. Using a strong cipher cannot compensate for exposed keys, unsafe application logic, or missing authorization.

Example

A service encrypts a stored test secret with a managed key and verifies the authentication tag before using the decrypted value.

Educational note

This definition is general information, not legal advice. It may omit facts that matter to a specific situation and does not establish or guarantee compliance.