done with StreamCipher