Also they talk about a secret key, not a private key. That means it's likely using symmetric key encryption, with RSA for signing (and maybe to update the symme

Also they talk about a secret key, not a private key. That means it's likely using symmetric key encryption, with RSA for signing (and maybe to update the symmetric key a la RSA-KEM). This is normal, nobody does direct asymmetric message encryption.