Avoid redundant GCM precomputation when the key hasn't changed.