Encrypt and decrypt text with AES. Supports ECB/CBC/CTR modes and PKCS7/Zero/None padding. All computation runs locally.