first I generate a private RSA keyfile with OpenSSL and then convert it into an encrypted \"der\" file:
$ openssl pkcs8 -topk8 -inform PEM -outform DER -in priva
The solution is:
return pbeCipher.doFinal(encryptedKey.getEncryptedData());