client side encryption and server side decryption