Tag-based field decryption