keySetup -> contextSetup
Cipher encrypt/decrypt returns optionals