use gcry_create_nonce(...) for salt generation