This might be a perf issue in some cases: size might be too small and too many calls on this method might create pressure on GC. If we assume that decrypt() is already not perf-oriented, then it's probably fine.