add xor_encrypt
compatible for old version client