Encryption for firmware updates is only to obscure the contents. The imgdecrypt binary here also references RSA_verify and similarly public-key cryptography sounding names so I assume they are using that to authenticate the firmware images (checking for a D-Link signature).

Of course this is D-Link and the product is an embedded garbage router, so chances are high they are doing it entirely wrong.