How much sense does it make to use AES-CTR when you are encrypting local offline data? I always saw it in networking in action.
And it's not one time, so imagine you encrypt many times every day.
The performance is not an issue because the data is very small, but what security measures shall be taken?
I think the counter of the AES-CTR must be randomly generated every time and kept along the encrypted data in clear text, right?