Technology & Computing
AES-GCM Nonce Collision & Key Exhaustion Calculator
Estimate the safe number of messages encrypted under one AES-GCM key before random 96-bit nonce collisions become likely.
Your inputs
Change any value to update the result instantly.
Safe messages per key (birthday bound)
3,98,06,57,29,532.8608
Collision probability at planned volume
0%
Nonce space size (2^96)
79,22,81,62,51,42,64,34,00,00,00,00,00,000
Planned messages
10,00,000
With random 96-bit nonces, NIST recommends limiting encryptions per key to well under 2^32 messages to keep collision risk negligible.
Formula and working
Birthday bound: safe message count ≈ sqrt(2 × 2^96 × target collision probability)
- 1
Collect the inputs
Acceptable collision probability = 0; Planned messages per key = 1,000,000
- 2
Apply the formula
Birthday bound: safe message count ≈ sqrt(2 × 2^96 × target collision probability)
- 3
Result
Safe messages per key (birthday bound) = 398,065,729,532.8608
Frequently asked questions
Important limitation
This is an educational estimate based only on the values and formula shown. Verify current rates, rules, units, and professional standards before relying on the result. It is not personalized financial or investment advice.
Report a mistake or request an improvement
Tell us if a formula, unit, explanation, or result needs attention. Your message will include this calculator’s name and page.
Related calculators
ECC vs RSA Security Equivalence Calculator
Compare an elliptic curve key size to the RSA modulus length needed to achieve the same symmetric security strength.
Password Entropy & Brute-Force Cracking Time Calculator
Calculate a password's entropy in bits and estimate worst-case brute-force cracking time at a given guess rate.
RSA Key Length Security Strength Calculator
Estimate the symmetric-equivalent security strength and relative computational cost of an RSA key length.
Hash Collision Probability & Birthday Attack Calculator
Estimate the probability of a hash collision occurring among a set of hashed items, based on the birthday paradox.
TLS Handshake Latency Overhead Calculator
Estimate the extra round-trip latency added by TCP and TLS handshakes for TLS 1.2, TLS 1.3 1-RTT and TLS 1.3 0-RTT resumption.
Binary, Octal, Decimal & Hexadecimal Multi-Base Converter
Convert a decimal number into binary, octal and hexadecimal representations and see its bit length.