* IV and CTR are set for the en-/decrypt operations, not in the constructor.
  This means that the crypto handle must be copied to the stack during the
  en-/decrypt calls, because setting IV/CTR changes its internal state.
* Add code for padding (not yet tested).