Closes #21 Getting stuff from http://crypto-js.googlecode.com/ seems rather insecure