Mask = AES-ECB(sn_key, Ciphertext[0..15])