wip: cipher streams
make Update track buffered count and return both input and output sizes