check for 16 bytes boundary before encryption