crypto/modes: even more strict aliasing fixes [and fix bug in cbc128.c from