I disagree with using password base encryption for getting key for encryption. It is not applicable for usage in this purpose.