refactored to make decryption easier to impliment in other kinds of captures (not just FileCaps)