S3C3: break fixed-nonce CTR mode using substitions.