If I set the salt to something constant, I get something constant out. If I then change the plaintext, everything after the first 16 bytes changes. This seems to indicate that salt=>'1' is really the default and that the first 8 bytes are a constant prefix that probably defines the crypto algorithm. The next 8 bytes after the prefix are the salt.