some fixes; plain tbl AES enc works