state: use raw-rsa