Names like `gcm128` are unclear and not future-proof. I'm not sure it's useful at all for this program to support multiple key sizes. But if it does, we should use the name of the key type as well as the key size, e.g. `aes128-gcm`.