@filippo Thanks a lot for the answer! So, that's nearly what I had in mind. I wasn't sure for the AES key length: I remember reading that 128 was enough in some places, and that we should move to 256 in some others