fixed tunnel encryption for non-AESNI