before-encryption