> Does this mean, that the 'decryption module' is necessary closed source?

Is there any precedent of anything being closed source behind standards implementations from the W3C? That seems unlikely, this seems terrible.