If I encrypt a plaintext p using aesAES-256-gcm in GCM mode with the keys k1..kn$k_1 ... k_n$ and I want to decrypt it later, can I use the keys in any order when decrypting or do I have to use the same order as when encrypting but in reverse?
If not, is there a modern symmetric encryption algorithm that lets me perform the decryption in any order?