Use whatever vetted AEAD mode that is available to you. That probably means AES-GCM or Chacha20 + Poly1305).

If you don't have any very good reasons to use CTR (encrypting lots of data with the same key) you.probably shouldn't.