Document the AES_cbc_encrypt() change