Provide a subframework to encrypt data at rest

[winzj]

Info

Just for documentation purposes this issue was created with the provided details from the pull request #3105

Situation

We need the possibility to encrypt data at rest.

Wanted (copied and adopted from related pull request)

Implement a sub-framework for encrypting data at-rest. Designed to encrypt text data which needs to be stored into a persistent storage (data base, object storage, file etc.).

The algorithms used fulfill the following requirements:

• protect both confidentiality and integrity
• are nonce misuse-resistant

Allows to rotate:

• initialization vectors (nonces)
• secrets
• ciphers