encryption lifecycle