title: How does the RSA private key passphrase work under the hood?
body: <p>RSA private keys may be assigned a "passphrase" which - as I understand it - is intended to provide some secondary security in case someone makes off with the private key file.</p>
  
  <p>How is the passphrase layer of security implemented?</p>