pub fn derive_chunk_nonce( volume_tweak: &[u8; 16], chunk_index_or_offset: u64, ) -> [u8; 12]
Derive a 96-bit nonce for AES-256-GCM.