gsuberland OP , 2 months ago @azonenberg @foone AES-GCM has some fragility with nonces too, so ChaCha20-Poly1305 is likely a better choice going forward.
@azonenberg @foone AES-GCM has some fragility with nonces too, so ChaCha20-Poly1305 is likely a better choice going forward.