AES encrypt / decrypt

AES-256 with a passphrase (CryptoJS, OpenSSL-compatible). Runs locally.