# Streaming AEAD overflow

Affected Versions
:   Tink version 1.0 - 1.3.x on Java
:   Tink version 1.0 - 1.3.x on Android
:   Tink version 1.0 - 1.3.x on Golang

Affected Key Types
:   AES-GCM-HKDF

## Description

[Streaming AEAD](https://developers.google.com/tink/streaming-aead) implementations encrypt the plaintext in
segments. Tink uses a 4-byte segment counter. When encrypting a stream
consisting of more than 2^32^ segments, the segment counter might
overflow and lead to leakage of key material or plaintext.