#encryption method should exclusively be gcm or cbc or