ipsec: esp_decrypt code clean up