Have you considered detecting AES-NI at runtime, using it if available, and automatically falling back to software when running on a system without it?
