pub fn seal(
key: &EncryptionKey,
plaintext: &[u8],
) -> Result<(Vec<u8>, Vec<u8>), EncryptionError>Expand description
Encrypt plaintext under key, returning (ciphertext, nonce).
A fresh random 12-byte nonce is generated internally on every call. The caller MUST persist the returned nonce alongside the ciphertext.