Anyways, looks like I'll be using AES-GCM with a 256 bit key. Time to work on key rotation too. Fun times…