very cryptic (heh) and needs to be described better, but now hashing the inputs to aes first to be more thoughtful/careful about them, as well as aes-256-ctr upgrade