use openssl, not mcrypt