S3C4: break fixed-nonce CTR statistically (+ refactoring).