GCM and CTR mode with 96 bit nonce

This reduces the nonce length to 96 bit as it is recommended for GCM. With test vectors from NIST and IETF our implementation is shown to be correct.
This closes #138.
I'd love a line comment on this line. Should this just set the counter array to the value 1? If yes, wouldn't there be a more obvious way?