Encryption

AES-GCM-256 con passphrase (PBKDF2-SHA256)