Whatever implementation you have access to that is considered safe. That probably means AES-GCM or chacha20+poly1305.