MODE_DECRYPT, not MODE_ENCRYPT, in decipher()