RsaOaepDecrypt needs to throw, not return null