using cryptopp, stable, untested