lowered AES key sizes from 256 to 128 bits, since Oracle JDKs (unlike OpenJDK) prohibit strong crypto by default