Security: How to encrypt external data carriers