encryption does not show also decryption again; ensure iv is always 16 characters