do not encrypt salt, too slow