don't need this, en/decrypt does it automatically
create a hash of encrypted data for failure checks