Noise.Crypto.Cipher.AESGCM (Noise Protocol v0.3.0)

AES-256-GCM cipher (spec §12.4): 96-bit big-endian nonce, 16-byte tag appended.