moved 0x9901 to sign_extra_aes_record