pub fn decrypt_aes256gcm( key: &[u8], nonce: &[u8], ciphertext: &[u8], ) -> Result<Vec<u8>>
Decrypts data using AES-256-GCM. Input: ciphertext (including tag), key, nonce.