There are two possibilities.

• There's a bug resulting in a byte of information leaking.
• There's an extra byte that serves as a key.

The safer bet is the presumption that there is no bug, thus the extra byte is junk. This was confirmed when the OP said my solution worked perfectly.