Could you shorten this a bit? The huge block of text really makes it hard to dig through these responses.

You need to JSON serialize the data as a string before encoding it. Also make sure that you are using the correct environment/domain associated wit the merchant certificate that is generating your session during the merchant validation step. If the merchant ID does not match in CyberSource then it cannot be decrypted.