using IdentityShroud.Core.Security; namespace IdentityShroud.Core.Contracts; public interface IDekEncryptionService { EncryptedDek Encrypt(ReadOnlyMemory plain); byte[] Decrypt(EncryptedDek input); }