Benjamin Black
causes trouble here.

See also the archive & talks.

An individual post follows.

AES-GCM Implementation & Analysis Papers

For some very good and very boring reasons I have been digging into AES-GCM (Galois/Counter Mode) implementation. I found a number of interesting papers analyzing GCM and describing a variety of interesting aspects of secure, fast implementation.

Analysis

Implementation