AES-NI backport from HEAD. Note that e_aes.c doesn't implement all modes