> XChaCha20-Poly1305 replaced with AES-256-GCM What could possibly go wrong? It's not like every CTF ever designed has a block cipher or counter mode challenge

> XChaCha20-Poly1305 replaced with AES-256-GCM What could possibly go wrong? It's not like every CTF ever designed has a block cipher or counter mode challenge. /s If the project wasn't done by WolfSSL, I would have assumed it's a trolling attempt to mock FIPS requirements. But it's not, and that's the problem.