OpenSSL needs CBC mode for CMAC though, so I don't think using ECB here makes sense.