decrypting messages encrypted with multiple passphrases now works reliably; the MDC packet is now actually checked (using a constant time comparison function) after decryption