Since DTLS 1.0 is based on TLS 1.1 we should never return a decryption_failed