specify CBC mode
use more conventional concat notation
bytes -> bits for clarity