aes-gcm streaming

The aes-gcm streaming tag covers a wolfSSL vulnerability involving cumulative single-message sizes beyond 64 GiB. CVE-2026-55967 affected wolfSSL versions 4.8.0 through 5.9.1 because the streaming APIs did not reject oversized messages, creating a risk of counter wrap, keystream reuse, and possible plaintext recovery. Tagged coverage focuses on the boundary conditions that can undermine otherwise sound cryptographic designs, along with the relevant advisory trail and remediation. The reported fix was merged for wolfSSL 5.9.2. This archive is useful for following technical details about AES-GCM streaming limits, affected versions, vulnerability impact, and the security considerations around safe API behavior.