 GCM is proven secure in the concrete security model.It is secure when it is used with a block cipher that is indistinguishable from a random permutation; however, security depends on choosing a unique initialization vector for every encryption performed with the same key ("see" stream cipher attack).For any given key and initialization vector combination, GCM is limited to encrypting bits of plain text (64 GiB).