Encrypts a UTF-8 plaintext string with AES-256-GCM under a fresh random IV.
The authenticated data is not stored. Decryption succeeds only when the same bytes are given again, which binds the ciphertext to what they name.
The string to encrypt.
32-byte AES key buffer.
Authenticated data; empty for a config file.
The IV, the ciphertext and the GCM authentication tag.
Encrypts a UTF-8 plaintext string with AES-256-GCM under a fresh random IV.
The authenticated data is not stored. Decryption succeeds only when the same bytes are given again, which binds the ciphertext to what they name.