@Override
public Key manageForDecrypt(Key managementKey, byte[] encryptedKey, ContentEncryptionKeyDescriptor cekDesc, Headers headers) throws JoseException
{
Long iterationCount = headers.getLongHeaderValue(HeaderParameterNames.PBES2_ITERATION_COUNT);
String saltInputString = headers.getStringHeaderValue(HeaderParameterNames.PBES2_SALT_INPUT);
Base64Url base64Url = new Base64Url();
byte[] saltInput = base64Url.base64UrlDecode(saltInputString);
Key derivedKey = deriveKey(managementKey, iterationCount, saltInput);
return keyWrap.manageForDecrypt(derivedKey, encryptedKey, cekDesc, headers);
}