token-based message encryption/decryption