TODO

I need to look further into the aes256-gcm@openssh.com variant to see if this is valid.