Verify AEAD cipher mode (AES-256-GCM), 96-bit IV length, and per-key message volume against NIST SP 800-38D birthday bounds.