use 96-bit nonce value for GCM
order stubs in order of the state changes