fix AES usage

the key for encryption/decryption is now formed as:
key = SHA256(system key || ssl master key)
the IV for AES is random

this is safer for AES encryption