Why is this using the md5 hash of the password to generate the key for the aes function instead of something like PBKDF2? Yeah I know the hash isn&#x27;t stored anywhere, but still, using md5 in a security setting feels wrong.