Various caveats, including the complete lack of authentication, lack
of EC and policy support, hard-coded use of PKCS#1 padding, etc.

But hey, it works for my test case.
Signed-off-by: David Woodhouse <dwmw2@infradead.org>