s/AES/AES128/ in diagnostics and --list-config