Switch to CTR instead of CBC mode for encryption.