TODO

I need to look further into the aes128-gcm@openssh.com variant to see if this is valid.