double encryption for purchase responses