Stream cipher is now configurable, while AES remains the default; still uses exactly 256-bit key