pub fn encrypt(der_pubkey: &[u8], message: &[u8]) -> Result<Vec<u8>, String>