I am surprised to see this is using AES-GCM instead of XChaCha20-Poly1305 for its authenticated encryption scheme.

The poor cats and dogs need special hardware for speedy encryption, and can't accidentally reuse nonces without catastrophic failure :(