His use of the word "decrypted" shows at least some lack of understanding. The SSNs were in base64 as I understand it so "decoded" would make sense but as we all know these two concepts are vastly different. He uses the locked analogy but there is no key or lock in this scenario.