Encrypt as nonce12 || ciphertext || tag16; large files use staged adapters.
nonce12 || ciphertext || tag16