basic decoding of CRYPT suboptions