Mac checking is now applied before file decryption