initial support for twofish in keepass (twofish CBC mode is TODO)