Implementing backup encryption with AES-256 in GCM mode.
Depends on D8998
Tested with next diff.
ct1 and ct2 is a whitepaper notation