Apparently, the device only supports 32bit key lengths.
Fixed calculating the CRC for the received encrypted data. It shouldn’t contain the CRC itself.