Hi Joe, we're seeing this periodically in our logs too since going live (it's the only consistent error we seem to be getting). I came here to investigate since I was concerned that perhaps people were trying to break the CAPTCHA, but I don't know what users are seeing on their side. I've never been able to reproduce it locally to troubleshoot what's going on. Sorry I can't provide much more info. I do have the site feedback front and center but no one has complained about any contact form problems yet. Here's what we are getting in our logs:
2010-12-14 14:25:26,779 ERROR mojoPortal.Web.Global - 66.249.67.53-en-US - /CaptchaImage.ashx?spec=uDh8e1aNEZi%2BRFpVlFWTfJyuKmlekrr2FD%2BOvj1JwOskXWp1gVavkqHiAaG09tTa
System.Security.Cryptography.CryptographicException: Padding is invalid and cannot be removed.
at System.Security.Cryptography.RijndaelManagedTransform.DecryptData(Byte[] inputBuffer, Int32 inputOffset, Int32 inputCount, Byte[]& outputBuffer, Int32 outputOffset, PaddingMode paddingMode, Boolean fLast)
at System.Security.Cryptography.RijndaelManagedTransform.TransformFinalBlock(Byte[] inputBuffer, Int32 inputOffset, Int32 inputCount)
at Subkismet.Captcha.CaptchaBase.DecryptString(String encryptedEncodedText)
2010-12-14 14:25:26,966 INFO mojoPortal.Web.Global - crypto error trapped and returned a 404 instead of 500 for security reasons
Jamie