Mismatch of security levels.  AES-256 ~= SHA512 / AES-128 ~= SHA256.  I would suggest just using AES-128 and SHA-256.