use optional_crypto aes in ECB mode everywhere