Ofcourse you can... Use the setupmgr.exe file contained in the deploy.cab archive in the support folder of the xp cd to generate a winnt.sif file and select the checkbox that says encrypt key. When you read the winnt.sif file in notepad later, you'll see that the key in is the encrypted form.