[tptacek]

Guttman's wording here is imprecise. GCM and Poly1305 are not comparably brittle. Both have nonce misuse issues, but GCM has additional problems. See:

https://news.ycombinator.com/item?id=13384762