Or, the module Filter::CBC appears to be a more solid way of doing exactly this. I've not used it, so I cannot comment on its security...