Trust dies in darkness: Shedding light on Samsung’s TrustZone Keymaster design [pdf]
This was obviously built by someone lacking even a basic understanding of how to use cryptographic primitives. It's not that hard to use an AEAD cipher construction properly. Nonce stands for number used once.