decrypt in work, though does not do its job