fix: use EVP_DecryptUpdate while decrypting