ebpf Chasing a Flake Into OpenSSL's GCM Path A CI flake that turned out to be a deterministic failure on AVX-512 CPUs, and how kloak now recovers OpenSSL's GCM hash subkey without running AES in BPF Kloak Team · October 21, 2026