turns out key length for AES256 must be 32bytes