Even AES 256 is breakable. Even then, now you're worried about not just the message value, but the key as well.<p>All for what? The convenience of letting a user keep the same password they already forgot?<p>A hash with a salt works perfectly fine for 99% of all situations with very little downside.