AES-256-GCM Encrypt / Decrypt

Encrypt or decrypt text with a passphrase. PBKDF2-derived key, fresh salt + IV per message.