Compiling but totally untested gcrypt code
Wrong flag
Use secure memory for decrypted content
Generic encrypt/decrypt
More untested stuff
Use derived keys, not simple hashes