Decrypt (AES-256-GCM)