Notably, the order of the subkeys was reversed. Single block encrypt/decrypt works now. Rev: src/nettle/x86/aes.asm:1.5