only good aes and system random acceptable
use CBC instead of ECB