IV must not be reused. Get random IV for every new digest. Assume first 16 bytes of the message to be an IV.