3.3.6 CipherInputStream