Crypto wrapper - implements tag based en/decryption