AES-256 is the easy part. The three decisions that decide whether your AES encryption is real encryption are mode of operation, key derivation, and output framing.