pub fn decrypt(cipher_hex: &str, key: &[u8]) -> Result<String>Expand description
Decrypts a hex-encoded ciphertext string using AES-256-GCM and a 32-byte key.
The cipher_hex must be the output of encrypt, containing the 12-byte
nonce followed by the ciphertext.