Hardened AES 256 encryption against /U and /O strings of excessive
length