encryption vulnerability