encryption works decryption needs work