return nil when encrypt fails (blank password given)