encryption flaw