default crypt mode