There's both. The encryption (decryption) key has leaked. The original question was about "making your own microcode", for which you would need the (not leaked, and unlikely to leak) private signing key.