CRYPTO_BOX -> 20131128 base64 ctr hmac modes pbkdf2 pem serpent sha2_64