GCM is only defined for 128-bit block ciphers and the tag length is guaranteed to be the same as the block size. We actually do this same calculation in the OpenSSL backend [here](https://github.com/pyca/cryptography/blob/master/cryptography/hazmat/backends/openssl/backend.py#L277).