Huh. Maybe you've got a mix of 'salt' and 'randomiv' data? Your encrypt routine has presumably been working since the change - only decryption has been bombing. You might try wrapping the first try in an eval - if it fails, try again with the alternate option.

-sam