pub fn decrypt(key: &[u8; 32], data: &[u8]) -> Result<Vec<u8>, &'static str>
AES-256-GCM 解密
输入 [nonce(12) | ciphertext | tag(16)]
[nonce(12) | ciphertext | tag(16)]