def decrypt_value(secret_key, message)
        value_key  = kdf(secret_key)[:value_key]
        nonce      = message[0, NONCE_BYTES]
        ciphertext = message[NONCE_BYTES..-1]
        Crypto::SecretBox.new(value_key).decrypt(nonce, ciphertext)