peg the version of cipher that we use
Merge pull request #687 from dart-lang/devoncarew_cipher

peg the version of cipher that we use