decrypt
open suspend override fun decrypt(aad: ByteArray, encryptedKey: ByteArray, iv: ByteArray, data: ByteArray, tag: ByteArray, contentAlgorithm: EncryptionContentAlgorithm): ByteArray(source)
Unwraps encryptedKey using the hardware-backed RSA private key, then decrypts data with the recovered CEK using contentAlgorithm.
Throws if authentication tag verification fails (AES-CBC-HMAC modes) or if the OAEP unwrapping fails.