Remove 2 allocs by reusing CipherContext