Multiple decipherment of single-length keys

Definition of the multiple encipherment of an encrypted single-length key (Y = e*KEK(K)) using a double-length *KEK.

The multiple encipherment of an encrypted single-length key (Y = e*KEK(K)) using a double-length *KEK is defined as follows:

    d*KEK(Y) = dKEKL(eKEKR(dKEKL(Y)))
             = d*KEK(e*KEK(K))
             = K

where KEKL is the left 64 bits of *KEK and KEKR is the right 64 bits of *KEK.

Figure 1 illustrates the definition.