Switch to AES-CTR, which forge and pycrypto (almost) agree on