Base 64. Probably unnecessary, but nice because it makes the encrypted data printable in the log. Can confirm both the encryption key and the encrypted, base64-encoded URL list are restored properly after a backup. But the decrypted data are garbage. Still looking.
More improvements and logging. Still a problem.
fixed a crash in the settings controller
Convert to 256-bit AES. Same as before. Works perfectly, except after a device reboot.
This was the culprit.
Title image from old app.
More space for WOTD.