AES-SIV is also fine. In situations where you can't use eXtended-nonce algorithms ... AES is a variant of Rijndael block cipher, standardized by NIST in 2001. We provide the fastest available pure JS ...