mTilde is now generated via AES-CTR