Summary: Reduce buffer allocation and do multiple cipher encryption/decryption calls.
Reviewed-by: xuelei, ascarpino