[kaoD]

GCM has an integrity check built in, which is very useful in crypto.

https://crypto.stackexchange.com/questions/2310/what-is-the-...

https://crypto.stackexchange.com/questions/14747/gcm-vs-ctrh...

https://security.stackexchange.com/questions/33569/why-do-yo...