Passback encrypt

new like this doesn't leak? why not declaring local instances and passing the address-of?