Generate HMAC (SHA-256) and encrypt/decrypt with AES-GCM-compatible passphrase (AES). For demo purposes only.