encrypt/decrypt works, added in key stretching