Use GCM mode or separate HMAC for verifying encrypted data
Cleanup readme, add note about padding