Decryption now works.  Test cases pass after fixing the subkey
generation.