How does this compare to other GCM alternatives such as AES-SIV and AES GCM-SIV?