A contract for a replaceable encryptor/decryptor that is only related to the actual act of encryption or decryption. Key look up, reading, encryptor configuration, and padding are all construction level details that are not covered by this API, and should be handled in a dependency injection container, instance construction, or some other "factory".