nopw: use rsa