This mirrored my confusion when `AES_cbc_encrypt` modified my IV data when _decrypting_.