Exceptions and Caveats
Note the following when using AES-CBC-CS1 keys.
Guarding Existing Files Without Data Transformation
You must convert an existing file with clear text through offline data transformationor LDT. If you do not transform the file, then after you guard using an AES-CBC key, the file displays garbled characters.
If you use an AES-CBC-CS1 key, access to the file is blocked with an I/O error.