switch to internally managing the encryption seq with more randomness