encrypt functional, decrypt not.