static ICipherAsync GetCipherImpl() => new EncryptedNewKeySignedCipher(
CertificateFactory.GetDecryptingSha256Certificate(),
CertificateFactory.GetSigningCertificate()); // SHA1 also works with this cert