Comment by cryptonector

> I should really make sure IV/Salt are regenerated automatically after use.

Good idea.

> I started with CBC (without MAC)

Oof, you really didn't want to do that :) Glad you upgraded to GCM.