Key must be Base64-encoded with 32 bytes in length