PKCS7_DecodeEnvelopedData, RsaPrivateDecryptInline can return 0 upon error