bug in decryption