implement decryption for tolerant mode