code: func Encrypt(payload []byte, secret string) ([]byte, error) {
  	salt := GetRandomString(saltLength)
  
  	key := encryptionKeyToBytes(secret, salt)
  	block, err := aes.NewCipher(key)
  	if err != nil {
  		return nil, err
  	}
  
  	// The IV needs to be unique, but not secure. Therefore it's common to
  	// include it at the beginning of the ciphertext.
  	ciphertext := make([]byte, saltLength+aes.BlockSize+len(payload))
  	copy(ciphertext[:saltLength], []byte(salt))
  	iv := ciphertext[saltLength : saltLength+aes.BlockSize]
  	if _, err := io.ReadFull(rand.Reader, iv); err != nil {
  		return nil, err
  	}
  
  	stream := cipher.NewCFBEncrypter(block, iv)
  	stream.XORKeyStream(ciphertext[saltLength+aes.BlockSize:], payload)
  
  	return ciphertext, nil
  }
docs: // Encrypt encrypts a payload with a given secret.