Use EVP_aes_128_ecb() to implement AES-CTR instead of AES_ecb_encrypt().

In theory this should just wrap EVP_aes_128_ctr(), but in practice availability of that routine depends on OpenSSL version.  Maybe something to selectively enable if it's available at build time.