Fix CTR mode to increment then encrypt (a la NIST standard)