final Cipher cipher = createGCMCipher(true, nonce);
        cipher.updateAAD(associatedData);

        // Use constant-time encryption
        final byte[] encrypted = performConstantTimeEncryption(cipher, message);

        // Split ciphertext and authentication tag
        final int tagLength = getAuthTagLength();
        final byte[] ciphertext = new byte[encrypted.length - tagLength];