|visits||member for||2 years, 3 months|
|seen||Oct 23 '12 at 15:02|
What causes first block of AES decryption to be garbled, even with correct IV?
The issue was, as Thomas pointed out, the last paragraph. I wasn't updating the IV from the Finished message. I knew this conceptually (update after last block), but somehow overlooked the idea that it spans across TLS messages themselves as well. Seems obvious in hindsight. Thanks!