Passback encrypt

creating a string is an allocation so you're probably better off using the proper ctor like your did.