Moved AESCBC decryption out to a module. Also pretty much figured out how ES signatures should work (I think).