Revert "don't put AES 256 CBC over AES 128 GCM by default"

This reverts commit d09cbae3b786e3ad92024db4dbfae3652ea5c27c.
add RLWE+AES256