Now that we've got at least some SDCTR modes working (and aes256-ctr is our