The plugin used the ciphertext instead of the plaintext buffer for key decryption which led to bogus ciphertext keys. Ref #4032