Be defensive about short ciphertexts
Add default rand.Reader for GenerateKey
Working pipe implementation