fix migration from old to new encryption
make legacyDecrypt() private als always call legacyBlockDecrypt() from other classes
legacyBlockDecryprt() needs to be public