Thanks! I didn't clock that - should have looked at the decrypted values!