AES-GCM Decrypt

Decrypt ciphertext encrypted with AES-256-GCM. Requires the correct key, nonce, and authentication tag. If the ciphertext has been tampered with or the wrong key is used, decryption fails with a clear error. This is the counterpart to AES-GCM Encrypt.

Privacy: this tool processes your data entirely in your browser. Nothing you paste or type is sent to the server.

The encrypted data as a hex string.

The 256-bit (64 hex char) key used for encryption.

The 12-byte (24 hex char) nonce from encryption.

The 16-byte (32 hex char) authentication tag from encryption.

Must match the AAD used during encryption.

Result

Enter your values and press Calculate — the result appears here.

Worked examples

Decrypt a message

  • ciphertext = (ciphertext from AES-GCM Encrypt)
  • key = (key from AES-GCM Encrypt)
  • nonce = (nonce from AES-GCM Encrypt)
  • tag = (tag from AES-GCM Encrypt)

Result: The original plaintext, or an authentication error.

Frequently asked questions

What happens if I use the wrong key?

Decryption fails with "Authentication failed" - you get no partial results. AES-GCM is designed so that wrong keys produce completely random-looking output that fails the authentication check.

What happens if the ciphertext is tampered with?

Decryption fails. The authentication tag detects any modification to the ciphertext, nonce, or AAD. This is the "authenticated" part of AES-GCM.

Can I decrypt without the nonce?

No. The nonce is required for AES-GCM decryption. Without it, the decryption algorithm cannot proceed. Always store the nonce alongside the ciphertext.

💬 Discuss on BestWordz Community

Join the conversation about Cybersecurity, aes decryption, aes-gcm decrypt on the BestWordz Community forum.

Visit Forum →
Copied!