> What's wrong with CBC?
It’s not tamper proof, ie signed, unlike GCM
> Some modern modes of operation combine confidentiality and authenticity in an efficient way, and are known as authenticated encryption modes
https://en.m.wikipedia.org/wiki/Block_cipher_mode_of_operati...
I’d also add: CBC requires padding and GCM does not. Minor convenience.