Wireguard also uses ChaCha20-Poly1305, but I am not sure it's relevant? I believe that attack is specific to SSH: "The attack exploits weaknesses in the specif

Wireguard also uses ChaCha20-Poly1305, but I am not sure it's relevant? I believe that attack is specific to SSH: "The attack exploits weaknesses in the specification of SSH paired with widespread algorithms, namely ChaCha20-Poly1305 and CBC-EtM, to remove an arbitrary number of protected messages at the beginning of the secure channel, thus breaking integrity." [0] https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/ https://arstechnica.com/security/2023/12/hackers-can-break-s...