func (s *SKB) tsecUnlock(tsec *triplesec.Cipher) ([]byte, error) { unlocked, err := tsec.Decrypt(s.Priv.Data) if err != nil { if _, ok := err.(triplesec.BadPassphraseError); ok { err = PassphraseError{} } return nil, err } return unlocked, nil }