Encrypt or decrypt text using AES-256 in CBC mode with random IVs. Compatible with MuleSoft's Secure Configuration Properties tool. Key is derived via SHA-256 from a passphrase, output is Base64-encoded.
Input
Key is derived with PBKDF2-SHA-256 (100k iterations) + random salt.