cts128.c: add support for NIST "Ciphertext Stealing" proposal.