 For this reason, the system or protocol that implements GCM should monitor and, if necessary, limit the number of unsuccessful verification attempts for each key.Saarinen described GCM weak keys.This work gives some valuable insights into how polynomial hash-based authentication works.