I'd carefully added a workaround to maintain compatibility with the Android AES-CTR implementation... to the wrong thing.