Expand description
AES-256-GCM authenticated encryption with associated data.
seal/open are the low-level primitives that take an explicit nonce
and AAD. Callers that just want to wrap a key under a KEK without
managing nonces should use wrap instead.