Weak encryption garbling data

I was using the base64xor for weak encryption (where data isnt really that important... but all the same...) without problems till recently

I've found that some (but only some) strings dont appear to decrypt correctly.

attached is a demo based on the Wiki example very closely, along with the output I get

Ill fully admit to doing silly stuff but this surely should work... shouldnt it?

default {
    state_entry() {
        string data = "gNi6AygkYJBfT0cIreJM10";
        string  crypt;  // for storing the encrypted data
        
        llSay(0,"Base 64 garble test");
        llSay(0, data);
        
        // convert both data and key to base64 and encrypt the data with the key
        // then store the encrypted data in 'crypt'
        crypt = llXorBase64Strings(llStringToBase64(data), llStringToBase64((string)llGetOwner() ));
        
        llSay(0, crypt); // this could now be used to email the data around
        // someone without the correct key wouldn't be able to (easily) get the plaintext
        
        // decrypt it again, using the same key, and convert back to plaintext
        llSay(0, llBase64ToString(llXorBase64Strings(crypt, llStringToBase64((string)llGetOwner() ))));
        // as you can see, applying the same key to encrypted data again decrypts it
    }
}

Im fed up trying to work this out, and going to bed now, for at least 4 hours before i need to get up again.

ps just noticed a comment on the wiki about possible unconfirmed padding problems
still to late to check it out.

i noticed it seems XOR is temporary fubared, i the doubt i change my encryptions to something stronger anyway

llXorBase64Strings is definitly borked, i beleive it's only half proforming the xor.

Made a repeative test for the weak encryptiong and seems to fail 99% of the time. Very troubling, I actually have some products that rely on this.

//WEAK ENCRYPTION TESTER
//
//Owner touches to start & stop script
//Randomly creates a random floating number to encrypt
//Creates a random floating number for password
//Encrypts then decrypts data and checks to see if decrypted data = original


integer count;
vector color;
integer errors;
integer ON = FALSE;
string msg;

text()
{
    llSetText("ERROR(S): " + (string)errors + "\nATTEMPT(S): " + (string)count + "\n" + msg, color, 1.0);
}


check(string data, string password)
{
    count++;                             //Adds one to number of attempts
    string crypt = llXorBase64Strings(llStringToBase64(data), llStringToBase64(password));         //Encrypts data using password
    string decrypt = llBase64ToString(llXorBase64Strings(crypt, llStringToBase64(password)));    //Decrypts data using password
    if (data != decrypt)            //Checks to see if decrypted value = data
    {
        msg = "DATA EXPECTED: " + data + "\nDATA RECEIVED: " + decrypt;  //msg to show data expected and data received
        errors++;                        // Add one to error counter
        color = <1,0,0>;                //Color Red for Error
        text();                                //Displays SetText       
    }
    else 
    {
        msg = "PASSED";            //msg to show decryption passed
        color = <0,1,0>;                //Color Green for passed
        text();                                //Displays SetText
    }
}
    
    


default 
{
    touch_start(integer num_detected)
    {
        if (llDetectedKey(0) == llGetOwner())  //Use for only owner
        {
            ON = llAbs(ON - 1);                //Toggles ON to be 1 or 0 (TRUE OR FALSE)
            if (ON)
            {
                count = 0;                            //Reseting counter for attempts & errors
                errors = 0;
                llSetTimerEvent(1.0);            //Setting timer w/ 1.0 sec intervals
            }
            else 
            {
                llSetTimerEvent(0);                //Turning off Timer
                msg = "*INACTIVE*";            //Setting message that encryption tester is off
                color = <0.5, 0.5, 0.5>;         //Gray color
                text();                                    //Displays counters of last test and show inactive greyed out
            }
        }
    }
    
    timer()
    {
        string RandomFloat = (string)llFrand(99999999);   //Random float
        string RandomPassword = (string)llFrand(99999999); //Random Password, another random float.
        check(RandomFloat, RandomPassword);  //Every Second checks to see if encrypting and decrypting 
    }    
} 

Thanks,

Im glad it wasnt me bad.
And yes, I know I really shouldn't rely on it for anything important or valuable - and I wont