I think this encryption code should go in `sys/encryption`, as it's own module. It's probably very useful for other applications too.