commit 26c8c6adcb9a6485966070418080a17cd2445bed
author Paul Kehrer <paul.l.kehrer@gmail.com> Fri Nov 29 16:24:56 2013 -0600
committer Paul Kehrer <paul.l.kehrer@gmail.com> Fri Nov 29 17:19:46 2013 -0600
tree ceec4d04f3a509494a929d773f23396a957ee152
parent 67abc864cb64033333aa08a03fba1dd153074dfd

begin adding warnings to GCM mode

docs/hazmat/primitives/symmetric-encryption.rst

diff --git a/docs/hazmat/primitives/symmetric-encryption.rst b/docs/hazmat/primitives/symmetric-encryption.rst
index 70c3d2f..a77e0e7 100644
--- a/docs/hazmat/primitives/symmetric-encryption.rst
+++ b/docs/hazmat/primitives/symmetric-encryption.rst
@@ -320,6 +320,12 @@
 
 .. class:: GCM(initialization_vector, tag=None)
 
+    .. warning::
+
+        When using this mode you MUST not use the decrypted data until every
+        byte has been decrypted. GCM provides NO guarantees of ciphertext
+        integrity until decryption is complete.
+
     GCM (Galois Counter Mode) is a mode of operation for block ciphers. It
     is an AEAD (authenticated encryption with additional data) mode. AEAD
     is a type of block cipher mode that encrypts the message as well as