stage 1 AES en/decryption untested