Reworked AES logic, migrated to OAEP

This change is not backwards compatible, hence the major version number increment.

This change improves the AES encryption logic (by using a non-null IV), whilst also switching over to OAEP padding rather than the PKCS#1 that was used previously.