Support 3DES
Keep trying on failure
Support the no-MDC (resync) case
Support session keys
Asymmetric decryption