// Decrypt
        byte[] plaintextBytes = cipher.doFinal(encryptedData);

        try {
            // Convert bytes back to char[]
            return bytesToChars(plaintextBytes);
        } finally {
            // Securely wipe plaintext bytes - guaranteed by try-finally
            if (plaintextBytes != null) {
                SecureKeyManager.secureWipe(plaintextBytes);