aes-256-cbc-hmac-512 + bcrypt (bb #693)