AES block size is fixed. TODO: magic version header instead