Offline AES-256-GCM text encryption with Argon2id, no internet permission