diff --git a/extmod/modtrezorcrypto/modtrezorcrypto-aes.h b/extmod/modtrezorcrypto/modtrezorcrypto-aes.h
index cb6cea33c..e032a5741 100644
--- a/extmod/modtrezorcrypto/modtrezorcrypto-aes.h
+++ b/extmod/modtrezorcrypto/modtrezorcrypto-aes.h
@@ -20,12 +20,25 @@ typedef struct _mp_obj_AES_t {
     uint8_t ctr[AES_BLOCK_SIZE];
 } mp_obj_AES_t;
 
+enum {
+    ECB = 0x00,
+    CBC = 0x01,
+    CFB = 0x02,
+    OFB = 0x03,
+    CTR = 0x04,
+    Encrypt = 0x40,
+    Decrypt = 0x80,
+};
+
+#define AESModeMask 0x3F
+#define AESDirMask  0xC0
+
 STATIC mp_obj_t mod_TrezorCrypto_AES_make_new(const mp_obj_type_t *type, size_t n_args, size_t n_kw, const mp_obj_t *args) {
     mp_arg_check_num(n_args, n_kw, 2, 3, false);
     mp_obj_AES_t *o = m_new_obj(mp_obj_AES_t);
     o->base.type = type;
     o->mode = mp_obj_get_int(args[0]);
-    if ((o->mode & 0x7F) > 0x04) {
+    if ((o->mode & AESModeMask) > 0x04) {
         nlr_raise(mp_obj_new_exception_msg(&mp_type_ValueError, "Invalid AES mode"));
     }
     mp_buffer_info_t key;
@@ -46,21 +59,21 @@ STATIC mp_obj_t mod_TrezorCrypto_AES_make_new(const mp_obj_type_t *type, size_t
     memset(o->ctr, 0, AES_BLOCK_SIZE);
     switch (key.len) {
         case 16:
-            if (o->mode == 0x80 || o->mode == 0x81) {
+            if (o->mode == (ECB | Decrypt) || o->mode == (CBC | Decrypt)) {
                 aes_decrypt_key128(key.buf, &(o->ctx.decrypt_ctx));
             } else {
                 aes_encrypt_key128(key.buf, &(o->ctx.encrypt_ctx));
             }
             break;
         case 24:
-            if (o->mode == 0x80 || o->mode == 0x81) {
+            if (o->mode == (ECB | Decrypt) || o->mode == (CBC | Decrypt)) {
                 aes_decrypt_key192(key.buf, &(o->ctx.decrypt_ctx));
             } else {
                 aes_encrypt_key192(key.buf, &(o->ctx.encrypt_ctx));
             }
             break;
         case 32:
-            if (o->mode == 0x80 || o->mode == 0x81) {
+            if (o->mode == (ECB | Decrypt) || o->mode == (CBC |Decrypt)) {
                 aes_decrypt_key256(key.buf, &(o->ctx.decrypt_ctx));
             } else {
                 aes_encrypt_key256(key.buf, &(o->ctx.encrypt_ctx));
@@ -80,38 +93,38 @@ STATIC mp_obj_t mod_TrezorCrypto_AES_update(mp_obj_t self, mp_obj_t data) {
     mp_obj_AES_t *o = MP_OBJ_TO_PTR(self);
     vstr_t vstr;
     vstr_init_len(&vstr, buf.len);
-    switch (o->mode & 0x7F) {
-        case 0x00: // ECB
+    switch (o->mode & AESModeMask) {
+        case ECB:
             if (buf.len & (AES_BLOCK_SIZE - 1)) {
                 nlr_raise(mp_obj_new_exception_msg(&mp_type_ValueError, "Invalid data length"));
             }
-            if ((o->mode & 0x80) == 0x00) {
+            if ((o->mode & AESDirMask) == Encrypt) {
                 aes_ecb_encrypt(buf.buf, (unsigned char *)vstr.buf, buf.len, &(o->ctx.encrypt_ctx));
             } else {
                 aes_ecb_decrypt(buf.buf, (unsigned char *)vstr.buf, buf.len, &(o->ctx.decrypt_ctx));
             }
             break;
-        case 0x01: // CBC
+        case CBC:
             if (buf.len & (AES_BLOCK_SIZE - 1)) {
                 nlr_raise(mp_obj_new_exception_msg(&mp_type_ValueError, "Invalid data length"));
             }
-            if ((o->mode & 0x80) == 0x00) {
+            if ((o->mode & AESDirMask) == Encrypt) {
                 aes_cbc_encrypt(buf.buf, (unsigned char *)vstr.buf, buf.len, o->iv, &(o->ctx.encrypt_ctx));
             } else {
                 aes_cbc_decrypt(buf.buf, (unsigned char *)vstr.buf, buf.len, o->iv, &(o->ctx.decrypt_ctx));
             }
             break;
-        case 0x02: // CFB
-            if ((o->mode & 0x80) == 0x00) {
+        case CFB:
+            if ((o->mode & AESDirMask) == Encrypt) {
                 aes_cfb_encrypt(buf.buf, (unsigned char *)vstr.buf, buf.len, o->iv, &(o->ctx.encrypt_ctx));
             } else {
                 aes_cfb_decrypt(buf.buf, (unsigned char *)vstr.buf, buf.len, o->iv, &(o->ctx.encrypt_ctx));
             }
             break;
-        case 0x03: // OFB (encrypt == decrypt)
+        case OFB: // (encrypt == decrypt)
             aes_ofb_crypt(buf.buf, (unsigned char *)vstr.buf, buf.len, o->iv, &(o->ctx.encrypt_ctx));
             break;
-        case 0x04: // CTR (encrypt == decrypt)
+        case CTR: // (encrypt == decrypt)
             aes_ctr_crypt(buf.buf, (unsigned char *)vstr.buf, buf.len, o->ctr, aes_ctr_cbuf_inc, &(o->ctx.encrypt_ctx));
             break;
     }
@@ -129,6 +142,13 @@ STATIC MP_DEFINE_CONST_FUN_OBJ_1(mod_TrezorCrypto_AES___del___obj, mod_TrezorCry
 STATIC const mp_rom_map_elem_t mod_TrezorCrypto_AES_locals_dict_table[] = {
     { MP_ROM_QSTR(MP_QSTR_update), MP_ROM_PTR(&mod_TrezorCrypto_AES_update_obj) },
     { MP_ROM_QSTR(MP_QSTR___del__), MP_ROM_PTR(&mod_TrezorCrypto_AES___del___obj) },
+    { MP_ROM_QSTR(MP_QSTR_ECB), MP_OBJ_NEW_SMALL_INT(ECB) },
+    { MP_ROM_QSTR(MP_QSTR_CBC), MP_OBJ_NEW_SMALL_INT(CBC) },
+    { MP_ROM_QSTR(MP_QSTR_CFB), MP_OBJ_NEW_SMALL_INT(CFB) },
+    { MP_ROM_QSTR(MP_QSTR_OFB), MP_OBJ_NEW_SMALL_INT(OFB) },
+    { MP_ROM_QSTR(MP_QSTR_CTR), MP_OBJ_NEW_SMALL_INT(CTR) },
+    { MP_ROM_QSTR(MP_QSTR_Encrypt), MP_OBJ_NEW_SMALL_INT(Encrypt) },
+    { MP_ROM_QSTR(MP_QSTR_Decrypt), MP_OBJ_NEW_SMALL_INT(Decrypt) },
 };
 STATIC MP_DEFINE_CONST_DICT(mod_TrezorCrypto_AES_locals_dict, mod_TrezorCrypto_AES_locals_dict_table);
 
diff --git a/src/tests/run_tests.sh b/src/tests/run_tests.sh
index b6358c459..d90925467 100755
--- a/src/tests/run_tests.sh
+++ b/src/tests/run_tests.sh
@@ -1,5 +1,13 @@
-#!/bin/sh
+#!/bin/bash
+results=()
 for i in *.py; do
    echo
-    ../../vendor/micropython/unix/micropython $i
+    if ../../vendor/micropython/unix/micropython $i; then
+       results+=("OK   $i")
+    else
+       results+=("FAIL $i")
+    fi
 done
+echo
+echo 'Summary:'
+printf '%s\n' "${results[@]}"
diff --git a/src/trezor/crypto/aes.py b/src/trezor/crypto/aes.py
index 2ae2fe980..f5fc43c98 100644
--- a/src/trezor/crypto/aes.py
+++ b/src/trezor/crypto/aes.py
@@ -1,61 +1,61 @@
-from TrezorCrypto import AES as _AES
+from TrezorCrypto import AES
 
-def AES_ECB_Encrypt(key: bytes):
+def AES_ECB_Encrypt(key: bytes) -> AES:
     '''
     Create AES encryption context in ECB mode
     '''
-    return _AES(0x00, key)
+    return AES(AES.ECB | AES.Encrypt, key)
 
-def AES_ECB_Decrypt(key: bytes):
+def AES_ECB_Decrypt(key: bytes) -> AES:
     '''
     Create AES decryption context in ECB mode
     '''
-    return _AES(0x80, key)
+    return AES(AES.ECB | AES.Decrypt, key)
 
-def AES_CBC_Encrypt(key: bytes, iv: bytes):
+def AES_CBC_Encrypt(key: bytes, iv: bytes) -> AES:
     '''
     Create AES encryption context in CBC mode
     '''
-    return _AES(0x01, key, iv)
+    return AES(AES.CBC | AES.Encrypt, key, iv)
 
-def AES_CBC_Decrypt(key: bytes, iv: bytes):
+def AES_CBC_Decrypt(key: bytes, iv: bytes) -> AES:
     '''
     Create AES decryption context in CBC mode
     '''
-    return _AES(0x81, key, iv)
+    return AES(AES.CBC | AES.Decrypt, key, iv)
 
-def AES_CFB_Encrypt(key: bytes, iv: bytes):
+def AES_CFB_Encrypt(key: bytes, iv: bytes) -> AES:
     '''
     Create AES encryption context in CFB mode
     '''
-    return _AES(0x02, key, iv)
+    return AES(AES.CFB | AES.Encrypt, key, iv)
 
-def AES_CFB_Decrypt(key: bytes, iv: bytes):
+def AES_CFB_Decrypt(key: bytes, iv: bytes) -> AES:
     '''
     Create AES decryption context in CFB mode
     '''
-    return _AES(0x82, key, iv)
+    return AES(AES.CFB | AES.Decrypt, key, iv)
 
-def AES_OFB_Encrypt(key: bytes, iv: bytes):
+def AES_OFB_Encrypt(key: bytes, iv: bytes) -> AES:
     '''
     Create AES encryption context in OFB mode
     '''
-    return _AES(0x03, key, iv)
+    return AES(AES.OFB | AES.Encrypt, key, iv)
 
-def AES_OFB_Decrypt(key: bytes, iv: bytes):
+def AES_OFB_Decrypt(key: bytes, iv: bytes) -> AES:
     '''
     Create AES decryption context in OFB mode
     '''
-    return _AES(0x83, key, iv)
+    return AES(AES.OFB | AES.Decrypt, key, iv)
 
-def AES_CTR_Encrypt(key: bytes):
+def AES_CTR_Encrypt(key: bytes) -> AES:
     '''
     Create AES encryption context in CTR mode
     '''
-    return _AES(0x04, key)
+    return AES(AES.CTR | AES.Encrypt, key)
 
-def AES_CTR_Decrypt(key: bytes):
+def AES_CTR_Decrypt(key: bytes) -> AES:
     '''
     Create AES decryption context in CTR mode
     '''
-    return _AES(0x84, key)
+    return AES(AES.CTR | AES.Decrypt, key)