crypto: switch to modern nettle AES APIs