all users have a different key, decrypted data is checked for correctness