https://pycryptodome.readthedocs.io/en/latest/src/cipher/aes.html Right now we're using AES-128-CBC mode for local encryption, we should use AES-GCM-256 instead for better security.