allow NULL IVs for CBC mode, same as all zero IV