pub fn decrypt_file( file_path: String, passphrase: String, expected_pch: String, output_file: String, ) -> Result<()>