minor optimizations in cfb mode
use forge sha256 implementation