Encrypt and decrypt files compatible with the OpenSSL CLI.
AES-256-CBC, PBKDF2 (10000 iterations), compatible with openssl enc -aes-256-cbc -pbkdf2
openssl enc -aes-256-cbc -pbkdf2