use RIPEMD-160 instead of MD5, use SHA512 to pad password for AES encrypt