Further refactoring will take over a month to get all the old features optimized to work with the new GUI, until then I won't add new features. So I hope someone will join and add this AL9H support, because I'm actually didn't look deep in that process.
Good news, AES/SHA hardware engines wrappers refactoring succeeded tonight, so it will be as easy to use as polarssl/mbedTLS API (which is excleded now) with both CTR and CBC modes (ECB should work fine also, will fix CCM if it will be of any use). Need to add several trcks to further optimise NAND access and then will update the preview build. Don't hesitate to have a look at