public byte[] decryptCMS(final byte[] data, final String receiverKeyAlias) {
        //Разворачиваем конверт
        //разбор CMS-сообщения
        Asn1BerDecodeBuffer dbuf = new Asn1BerDecodeBuffer(data);
        final ContentInfo all = new ContentInfo();
        try {
            all.decode(dbuf);
            dbuf.reset();
        } catch (Exception e) {
            throw new RuntimeException("Couldn't read input enveloped data.");
        }
        final EnvelopedData cms = (EnvelopedData) all.content;

        KeyTransRecipientInfo keytrans = new KeyTransRecipientInfo();
        if (cms.recipientInfos.elements[0].getChoiceID() == RecipientInfo._KTRI)
            keytrans =
                    (KeyTransRecipientInfo) (cms.recipientInfos.elements[0].getElement());
        final Asn1BerEncodeBuffer ebuf = new Asn1BerEncodeBuffer();
        dbuf = new Asn1BerDecodeBuffer(keytrans.encryptedKey.value);
        final GostR3410_KeyTransport encrKey = new GostR3410_KeyTransport();
        try {
            encrKey.decode(dbuf);
            dbuf.reset();
            encrKey.sessionEncryptedKey.encode(ebuf);
        } catch (Exception e) {
            throw new RuntimeException("Couldn't read input enveloped data.");
        }
        final byte[] wrapKey = ebuf.getMsgCopy();
        ebuf.reset();
        try {
            encrKey.transportParameters.ephemeralPublicKey.encode(ebuf);
        } catch (Exception e) {
            throw new RuntimeException("Couldn't read input enveloped data.");
        }
        final byte[] encodedPub = ebuf.getMsgCopy();
        ebuf.reset();

        final byte[] sv_d = encrKey.transportParameters.ukm.value;
        final Gost28147_89_Parameters params = (Gost28147_89_Parameters) cms.encryptedContentInfo.contentEncryptionAlgorithm.parameters;
        final byte[] iv_d = params.iv.value;
        final OID cipherOID = new OID(params.encryptionParamSet.value);
        final byte[] text = cms.encryptedContentInfo.encryptedContent.value;

        //получатель - закрытый ключ
        final PrivateKey responderKey;
        try {
            if (receiverKeyAlias != null)
                responderKey = (PrivateKey) keyStore.getKey(receiverKeyAlias, RECIPIENT_PASSWORD);
            else responderKey = (PrivateKey) keyStore.getKey(RECIPIENT_ALIAS, RECIPIENT_PASSWORD);
        } catch (Exception e) {
            throw new RuntimeException("Couldn't load private key from storage.");
        }

        //отправитель - открытый ключ из cms
        final PublicKey senderPublic;
        final X509EncodedKeySpec pspec = new X509EncodedKeySpec(encodedPub);
        try {
            final KeyFactory kf = KeyFactory.getInstance(responderKey.getAlgorithm(), PROVIDER_NAME);
            senderPublic = kf.generatePublic(pspec);
        } catch (Exception e) {
            throw new RuntimeException("Couldn't get public key from the certificate.");
        }

        // выработка ключа согласования получателем
        final KeyAgreement responderKeyAgree;
        try {
            responderKeyAgree = KeyAgreement.getInstance(responderKey.getAlgorithm(), CRYPT_PROVIDER_NAME);
            responderKeyAgree.init(responderKey, new IvParameterSpec(sv_d), null);
            responderKeyAgree.doPhase(senderPublic, true);
        } catch (Exception e) {
            throw new RuntimeException("Couldn't produce an agreement key.");
        }
        final SecretKey responderSecret;
        try {
            responderSecret = responderKeyAgree.generateSecret(CIPHER);
        } catch (Exception e) {
            throw new RuntimeException("Couldn't produce responder secret key, based on the agreement key.");
        }

        // Расшифрование симметричного ключа.
        final Cipher cipher;
        try {
            cipher = getInstance(CIPHER_MODE, CRYPT_PROVIDER_NAME);
            cipher.init(Cipher.UNWRAP_MODE, responderSecret, (SecureRandom) null);
        } catch (Exception e) {
            throw new RuntimeException("Couldn't produce cipher.");
        }
        final SecretKey simmKey;
        try {
            simmKey = (SecretKey) cipher.unwrap(wrapKey, null, Cipher.SECRET_KEY);
        } catch (Exception e) {
            throw new RuntimeException("Couldn't produce symmetric key.");
        }
        // Расшифрование текста на симметричном ключе.
        final GostCipherSpec spec = new GostCipherSpec(iv_d, cipherOID);
        final byte[] result;
        try {
            cipher.init(DECRYPT_MODE, simmKey, spec, null);
            result = cipher.doFinal(text, 0, text.length);
        } catch (Exception e) {
            throw new RuntimeException("Couldn't decrypt the payload.");
        }

        return result;
    }