We should put an upper bound for the payload and salt, which can be arbitrary bytes. For starters, maybe like 50MB for the payload and 1MB for the salt