pub fn chacha20poly1305_open( key: &[u8; 32], nonce: &[u8; 12], aad: &[u8], sealed: &[u8], ) -> Option<Vec<u8>>
AEAD open: verifies the tag (constant-time) and decrypts, or None on tamper/truncation.
None