dual AES enc fix