diff --git a/src/cmd_se_recover.rs b/src/cmd_se_recover.rs
index 888ba55..415f5e9 100644
--- a/src/cmd_se_recover.rs
+++ b/src/cmd_se_recover.rs
@@ -23,14 +23,14 @@ impl Command for CommandImpl {
 
         seutil::check_se_supported()?;
         let key = sub_arg_matches.value_of("key").unwrap();
-        let key = cmd_hmac_decrypt::try_decrypt(key)?;
         let key_uri = parse_key_uri(&key)?;
         let se_key_uri = key_uri.as_secure_enclave_key()?;
         debugging!("Secure enclave key URI: {:?}", se_key_uri);
 
+        let private_key = cmd_hmac_decrypt::try_decrypt(&se_key_uri.private_key)?;
         let (public_key_point, public_key_der, _private_key) =
             seutil::recover_secure_enclave_p256_public_key(
-                &se_key_uri.private_key,
+                &private_key,
                 se_key_uri.usage == KeyUsage::Singing,
             )?;