now A128CBC+HS256 works, A256CBC+HS512 not yet.