CBC mode prepends a random IV for each encryption. Use the same output format (Base64/Hex) for encryption and decryption.