=== CVE-2026-5479 Variant Test ===
Testing multiple distinct ChaCha20-Poly1305 EVP paths

Encryption succeeded.
Ciphertext: 3d3419f9407fd11946511c5ddc637932769e4760a4c49105361ada5e4c9c9f0a
Tag:        83f993511a9ec29118243aaaad3fc58c

--- Variant 1: EVP_CipherInit path with bad tag ---
EVP_CipherFinal ret=0
Plaintext match: YES
VULNERABLE: NO

--- Variant 2: Modified AAD with correct tag ---
EVP_DecryptFinal_ex ret=0
Plaintext match: YES
VULNERABLE: NO

--- Variant 3: Flipped ciphertext byte + correct tag ---
EVP_DecryptFinal_ex ret=0
Plaintext match: NO
VULNERABLE: NO