vendor encryption capabilities