Note showing zero-length nonces break GCM/GMAC by exposing GHASH key and enabling forgeries, because standards love footguns.

Benchmarks a zoo of multivariate polynomial universal hashes, then crowns a few new binary and prime field winners.

Can LLMs actually break ciphers? Schneier summarizes CryptanalysisBench and a few model-found attacks.