Use CryptoStreamProvider interface instead of hard-coding AES