> neither EncryptData nor DecryptData have any way of passing a key There could have been other smells involved, like the key being held in some more global sc

> neither EncryptData nor DecryptData have any way of passing a key There could have been other smells involved, like the key being held in some more global scope instead of being passed in via the call stack.