use AES-NI in new CBC encryption