cbc mode assertions