For simplicity, just before encrypting data we wrap it in a document with an empty key. I.e. to encrypt the BSON uint8_t value 10, we really encrypt the bytes for the BSON document:

{ "" : 10 }

It's wasteful, but was simpler to implement in the beginning. Fixing this doesn't change any API from driver's perspective, but does change the ciphertext.