Close to Optimally Secure Variants of GCM

Algorithm 6

The decryption algorithm of OGCM-2.

Input: three keys , a nonce , an associated data , a ciphertext , and a tag

Output: a plaintext or

If , then

Partition into ,

for and

for to

for to

return

else return .