Encrypt / Decrypt

AES-256-GCM with a key derived via SHA-256 from your passphrase. Format: nonce-ciphertext (base64).