checkpoint on encryption