use optional_crypto AES in ECB mode everywhere
Merge pull request #614 from rsplak/devel

Candidate list decryption fix