YES, Response from biller’s Notification and validation endpoint should be encrypted using biller IV key and Secret.