src/aes128gcm.rs (1 line):
	- line 133: // TODO: pre-allocate the final output buffer, and let `decrypt_from` write directly into it.