XOR to reveal plaintext string is working