crypto headers changed to protect/unprotect from encrypt/decrypt