cipher AES-128-CBC auth SHA256