looks okay - but AES doesn't decrypt right, and none match assertion
strings