Generates IV and places it before msg Uses 12 byte IV with AES-CTR Add API to explicitly set KDF salt.