Usage notes

The RSA private key must be enabled for key management functions.

The hardware configuration sets the limit on the modulus size of keys for key management; thus, this verb will fail if the RSA key modulus bit length exceeds this limit.

Decrypt operations using CRYSTALS-Kyber Round 2 and Round 3 keys use the Kyber.CPAPKE.Dec algorithm as described in the CRYSTALS-Kyber Algorithm specification v3.02 August 4, 2021.

ML-KEM uses ML-KEM.Decaps as described in FIPS-203 algorithm 21. Calls to the internal K-PKE.Decrypt function (algorithm 15) are not supported.