support for failed decryption