Buffer overflow in EncryptHash/DecryptHash (Move of 64 bytes into 16-byte TAESState) #115

*In MEncryptDecryptAES.pas, EncryptHash and DecryptHash do:

SetLength(InputBytes, 64);
FillChar(State, SizeOf(State), 0);
Move(InputBytes[0], State, Length(InputBytes));

TAESState is array[0..3, 0..3] of Byte (16 bytes), so this writes 48 bytes
past the end of State. It is undefined behavior: it may appear to work on
Windows, but on Android (ARM, FMX) it overwrote other locals (in my case
InputBytes itself ended up with Length = 0) and the output differed from
Windows.

The same pattern exists in EncryptPassword (Move with Length of the UTF-8
password bytes) and DecryptPassword (Move with Length of the decoded hex),
which overflow for inputs longer than 16 bytes.

Fix (EncryptHash):
SetLength(InputBytes, SizeOf(State)); // pads with zeros up to 16
Move(InputBytes[0], State, SizeOf(State));

Fix (DecryptHash): validate Length(InputBytes) = SizeOf(State) and raise an
error otherwise, then Move(InputBytes[0], State, SizeOf(State)).

Note: data encrypted with the current version may not decrypt after the fix,
since the overflow can corrupt ExpandedKey depending on the compiler's
stack layout.