use random iv, we finally have strong encryption