removed AES_ENCR option since you can't really have decrypt without bulk of encrypt