update encryption logic to capi.