ciphertext = split(stored) plaintext = decrypt(key