XAES-256-GCM (2024)

Found this through the Go blog where they've done some special work to support it recently in their FIPS-140-3 effort:

https://go.dev/blog/fips140

Nonce management with AES GCM is a huge pain, and I think this provides a way to just throw more randomness at the problem and stop worrying about it.