Move cipher ctx 'original iv' parameter into the provider