Avoid redundant GCM precomputation

Hi Sid,
I've made some changes to show how the GCMBlockCipher can be re-used (when the key is unchanged) such that redundant initialisation of the various (key-dependent) multipliers is avoided. This straightens out the weird performance numbers for lots of small texts.
Pete.