doing decrypt examine