Shift to AES128 CBC with PCKS1 padding.

Back to good ol' XML-Enc 1.0.
Downgrade Reference signature to SHA1 to match client.