cipher: Decrypt data even if mac is wrong

This is required to prevent timing attack.