generic: verify ciphertext of v2 encryption policies with AES-256