CDR: identifying encryption