technically it's the HMAC key, not encryption key.