aes256: generate salt by default, add salt:HEX option (bb#465)