constantTimeCopy(encrypted, ciphertext.length, authTag, 0, tagLength);

        return new EncryptionResult(ciphertext, authTag);
    }

    /**
     * Encrypt using AES-CCM with Bouncy Castle and constant-time operations
     */
    private EncryptionResult encryptWithCCM(byte[] message, byte[] nonce, byte[] associatedData) throws Exception {