     @_header_hash = null
     super({transform_func : @_encrypt, block_size : SALTPACK_BLOCK_LEN, readableObjectMode : true})
 
-# This is a raw NaCl stream - it doesn't implement msgpack, armoring, or anything like that. This should only ever be called inside the exposed EncryptStream class
+# This is a raw NaCl stream - it doesn't implement msgpack, armoring, or
+# anything like that. This should only ever be called inside the exposed
+# EncryptStream class
 class NaClDecryptStream extends require('stream').Transform
 
   # as above, this function encrypts for a specific key and is passed to `node-chunk-stream`

SALTPACK_BLOCK_LEN = (1024**2)
noop = () ->

# This is a raw NaCl stream - it doesn't implement msgpack, armoring, or anything like that. This should only ever be called inside the exposed EncryptStream class
class NaClEncryptStream extends stream.ChunkStream

  _write_header : (cb) =>

    @_header_written = true
    cb(null)

  # this function encrypts for a specific key, outputting a list object for
  # msgpack. it gets passed in as the transform function to `node-chunk-stream`
  _encrypt : (chunk, cb) =>
    esc = make_esc(cb, "NaClEncryptStream::_encrypt")
    # on the first call, spit out a header packet before writing payload
