use optional_crypto AES in ECB mode everywhere