decrypt returns tuple