Encryption is not authentication