encrypted key fragments