The forbidden attack. Collect ciphertext+tag pairs encrypted under the same nonce and use https://github.com/nonce-disrespect/nonce-disrespect to generate the tag

Original writeup (https://rctcwyvrn.github.io/posts/2020-03-12-galois_writeup.html).