Encrypt/decrypt using a nonce