GMAC is a message authentication code: it turns input into an authentication tag so a receiver can detect tampering. It combines GHASH with AES-CTR, using GHASH to process the input and AES-CTR to encrypt the resulting digest. section 4.5.2
Nonce reuse warning
AES-CTR requires a unique nonce. Reusing one creates the same keystream, allowing two ciphertexts to reveal the XOR of their plaintexts. section 4.5.2
