aes: introduce optional software backend based on lookup tables?

[newpavlov]

In some use cases timing variability is not a concern and IIUC table-based implementations are faster than fixslising. We could introduce such implementation gated behind an aes_backend_soft="some_scary_hazmat_value" flag.

[tarcieri]

I'd be okay with this if it required explicit opt-in as noted above