Certified High-Assurance Encryption