Data must be padded to 16 byte boundary in CBC mode