fix new cbc encryption