def decrypt_name(secret_key, encrypted_name)
        name_key   = kdf(secret_key)[:name_key]
        nonce      = encrypted_name[0, NONCE_BYTES]
        ciphertext = encrypted_name[NONCE_BYTES..-1]