ecrypted tokens framework, DIR key management and AES-CBC with HMAC encryption