Efficient parallel-pipelined GHASH for message authentication
The Security and Performance of the Galois/Counter Mode (GCM) of Operation