decrypts first byte