Comment by amadvance

That would make AES-XGCM an immediate replacement of AES-GCM that already supports an arbitrary long nonce.