Lesson 4 of 9 · 30m

Authenticated Encryption: AES-GCM and ChaCha20-Poly1305

Encryption without integrity is forgeable — AEAD fixes it, and AAD binds ciphertext to context.