common/cpt: fix encryption offset