expose aes_decrypt for use elsewhere