[jgrahamc]

You could use a well established library. GPG or OpenSSL for example.

[csarva]

OpenSSL is fairly low level and still lets you shoot yourself in the foot. You can make the same mistakes as in the OP post.