decrypt just as many bytes a required & make sure that trailing unarmed bytes are not discarded