store IV in file
configurable alg/hash
provide password for hmac
separate test