pad on encryption function, not on caller