Softokn's mapping of exchanged DH secret key to AES key obviously changed, so that the last 16 bytes are used.
RSA-1408 is too small on a faster CPU.