aes_gcm_gctr
aes_gcm_gctr(aes, J0, plain, plain_len, crypt);
aes_gcm_gctr(aes, J0, crypt, crypt_len, plain);