pub fn wrap(kek: &[u8; 32], plaintext: &[u8]) -> Vec<u8> ⓘExpand description
Wrap a plaintext blob under a KEK. Output layout: 12-byte nonce ||
ciphertext || 16-byte tag (the tag is appended by AES-GCM, so the total
length is 12 + plaintext.len() + 16).