See doc/crypt.pdf