move decrypt to utils