NewReader returns a new Reader that decrypts bytes from r.

NewWriter returns a new Writer that encrypts bytes to w.

closeFn will be called only once.

Reader is an io.Reader that can read encrypted bytes.

Writer is an io.Writer that can write encrypted bytes.