crypto api security