CNL also added another AES unit, so you can now dispatch aesenc and its ilk to ports 0 and 1.