TLS plaintext recovery and forgery via nonce reuse

Cryptographic nonce reuse in wolfSSL wolfProvider 1.0.0 through 1.2.1 allows remote attackers to read and forge TLS records. The TLS write-key setup generates one 8-byte explicit AES-GCM nonce, and the encryption context never increments it before encrypting later records. Exploitation requires multiple TLS 1.2 or DTLS 1.2 AES-GCM records under one key plus known plaintext; it reveals other record plaintext and enables authentication-tag forgery, but does not affect AES-CCM, TLS 1.3, or non-TLS cipher use.