It doesn't matter what code is running server side, as long as decryption happens client side and the keys are never transmitted to the server.