fn cbc( key: &[u8], iv: &[u8], data: &[u8], ) -> Result<Zeroizing<Vec<u8>>, Problem>
AES-256-CBC with PKCS#7 padding.