Usage notes

When using the DERIV01 keyword together with TR-31 key tokens, the three bytes from the Key Block Header indicating the TR-31 key usage and Algorithm (bytes 5-7), are used in the key derivation process.

Decrypt operations using CRYSTALS-Kyber Round 2 and Round 3 keys use the Kyber.CPAPKE.Dec algorithm as described in the CRYSTALS-Kyber Algorithm specification v3.02 August 4, 2021.

ML-KEM uses ML-KEM.Decaps as described in FIPS-203 algorithm 21. Calls to the internal K-PKE.Decrypt function (algorithm 15) are not supported.