The Wikipedia article on GCM says GCM can take full advantage of parallel processing
.
I had thought GCM uses a random IV for the first block, then for the second block uses the results of encrypting the previous block as the IV. If this is correct, how can it possibly be done in parallel?
The question boils down to which of these statements is wrong, and why?