Close to Optimally Secure Variants of GCM

Algorithm 5

The encryption algorithm of OGCM-2.

Input: three keys , a nonce , an associated data , and a plaintext

Output: a ciphertext and a tag

Partition into ,

for and

for to

for to

return