Encrypt and decrypt confidential text with authenticated AES-GCM 256-bit and PBKDF2 key derivation. 100% client-side zero server footprint.