if you are using that abomination that the security audit said had no bounds checking, i wouldn't actually trust it
i'm working on getting this going today so when i'm done i'll show you the fixed code
my guess though, is that the bytes have been mishandled somewhere just wouldn't doubt it's in the nip44 encryption code, did anyone actually test it? has it got test units?