"An application can make the tag dependent on the tag length by including tag_length in the nonces."
Should consider to make the tag always dependent on the tag length without the user having to include it in the nonce. As this will have some cons it should be evaluated that the pros > cons.
AES-CCM has tags dependent on the tag length, AES-GCM does not.
Current suggestion is
"An application can make the tag dependent on the tag length by including tag_length in the nonces."
Should consider to make the tag always dependent on the tag length without the user having to include it in the nonce. As this will have some cons it should be evaluated that the pros > cons.
AES-CCM has tags dependent on the tag length, AES-GCM does not.