minor README tweaks
added password entry and key-derivation functions
added SecretBox with padded AES256_CBCwithHMacSha256
make padding failure silent to avoid timing attack
added password-protected key storage file