format ciphertext as 0-padded hex string