// uses empty salt & empty IV
static S aesDecryptString(S data, S password) ctex {
  ret fromUtf8(aesDecrypt(base64decode(trim(data)), password));
}