The problem with a random nonce is that most implementations also use a nonce of 12 bytes which under some use cases might not be enough before you repeat a nonce. So to remedy this they suggest using a counter but this could be hard to implement.
When I use AES-GCM I just use a bigger nonce and use a random one.
Last time I used AES-GCM I had a really hard time getting the person writing the other end to not re-use nonces.
When I use AES-GCM I just use a bigger nonce and use a random one.
Last time I used AES-GCM I had a really hard time getting the person writing the other end to not re-use nonces.