first pass at AES chunk encryption, also made all RSA stuff use BC provider (does this mean we can use large keys on Oracle JVM?)