Incidentally: since there are similar concerns for most of the AE cipher constructions, not just EAX and GCM, I wonder if the EAX test suite here is an indication that Google uses a lot of EAX.

I liked the diss on GCM in the GCM test suite.