make encrypt return only the ciphertext, and make the extra bytes retrievable with a getter method afterwards