Yep, that's right, thanks. The public key is, of course, calculated based on the private key (these are RSA keys), hence why the brute-forcing still involves the private key, but it's not a hash of that key.