decryption in CBC mode works