don't re-use crypto object