cs concat fast-path
fix c stub
expose raw-(ish) aes
fortuna.

without the accumulator