server-side crypto stuff