crypto-native: fix AES-CBC encrypt loop