doc: fix supported AES-CBC key lengths