When CipherOutputStream is used to decrypt data compressed with AEAD cipher like AES/GCM, all data written to the stream is buffered until the stream is closed.

During every write operation, a new buffer large enough to hold the entire decrypted data is allocated. If the writes are frequent, this puts GC under pressure.

This issue was noticed while investigating JDK-8298249, which reported a similar case with CipherInputStream.