update encrypt,decrypt spec
use prepared statment