some 'enc' still can't decrypt