I am in favor of explicit IV. -- Tero T. Mononen <tmo@ssh.fi> Ssh Communications Security Oy http://www.ssh.fi/ F-Secure Internet Security Solutions http://www.datafellows.com/f-secure/