> Does the IV have to be *unpredictably* different, or just different? The part of me which is a Paranoid Cryptographic Protocol Engineer would generate it with a CPRNG. The IV is sent in the clear. I don't think it makes a difference how different it is, but I'm not a Real Cryptographer(tm). - Bill