Choosing what GPAL.Cryptography works with: the algorithm, the key material, and the data it acts on.
The operations themselves, each handing its result back through an out parameter.
Deriving a key from a password with PBKDF2, and using RSA to carry a key rather than a file.