if HAS_M2:
            aes = key.private_decrypt(ret['key'],
                                      RSA.pkcs1_oaep_padding)
        else:
            cipher = PKCS1_OAEP.new(key)