BigInteger mod = priv.getModulus();
BigInteger exp = priv.getPrivateExponent();
RSAKeyParameters keyParams = new RSAKeyParameters(true, mod, exp);
cipher.init(false, keyParams);
byte[] secretKeyBytes = cipher.processBlock(encryptedCEK, 0, encryptedCEK.length);
return new SecretKeySpec(secretKeyBytes, "AES");
} catch (Exception e) {
// org.bouncycastle.crypto.InvalidCipherTextException