Encrypt then increment - matching NIST test vectors.
Fix ctr mode iv increment order.