Internet-Draft PQ HPKE July 2026
Barnes & Connolly Expires 7 January 2027 [Page]
Workgroup:
HPKE Publication, Kept Efficient
Internet-Draft:
draft-ietf-hpke-pq-05
Published:
Intended Status:
Standards Track
Expires:
Authors:
R. Barnes
Cisco
D. Connolly
Selkie Cryptography

Post-Quantum and Post-Quantum/Traditional Hybrid Algorithms for HPKE

Abstract

Updating key exchange and public-key encryption protocols to resist attack by quantum computers is a high priority given the possibility of "harvest now, decrypt later" attacks. Hybrid Public Key Encryption (HPKE) is a widely-used public key encryption scheme based on combining a Key Encapsulation Mechanism (KEM), a Key Derivation Function (KDF), and an Authenticated Encryption with Associated Data (AEAD) scheme. In this document, we define KEM algorithms for HPKE based on both post-quantum KEMs and hybrid constructions of post-quantum KEMs with traditional KEMs, as well as a KDF based on SHA-3 that is suitable for use with these KEMs. When used with these algorithms, HPKE is resilient with respect to attacks by a quantum computer.

About This Document

This note is to be removed before publishing as an RFC.

The latest revision of this draft can be found at https://hpkewg.github.io/hpke-pq/draft-ietf-hpke-pq.html. Status information for this document may be found at https://datatracker.ietf.org/doc/draft-ietf-hpke-pq/.

Discussion of this document takes place on the HPKE Publication, Kept Efficient mailing list (mailto:hpke@ietf.org), which is archived at https://mailarchive.ietf.org/arch/browse/hpke. Subscribe at https://www.ietf.org/mailman/listinfo/hpke/.

Source for this draft and an issue tracker can be found at https://github.com/hpkewg/hpke-pq.

Status of This Memo

This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79.

Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet-Drafts is at https://datatracker.ietf.org/drafts/current/.

Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress."

This Internet-Draft will expire on 7 January 2027.

▲

Table of Contents

1. Introduction

A cryptographically relevant quantum computer may or may not exist as of this writing. The conventional wisdom, however, is that if one does not already, then it likely will within the lifetime of information that is cryptographically protected today. Such a computer would have the ability to infer decapsulation keys from encapsulation keys used for traditional KEMs, e.g., KEMs based on Diffie-Hellman over finite fields or elliptic curves. And it would be able to do this not just for data encrypted after the creation of the computer, but also for any information observed by the attacker previously, and stored for later decryption. This is the so-called "harvest now, decrypt later" attack.

It is thus a high priority for many organizations right now to migrate key exchange technologies to use "post-quantum" (PQ) algorithms, which are resistant to attack by a quantum computer [PQCE]. Since these PQ algorithms are relatively new, there is also interest in hybrid constructions combining PQ algorithms with traditional KEMs, so that if the PQ algorithm fails, then the traditional algorithm will still provide security, at least against classical attacks.

Hybrid Public Key Encryption (HPKE) is a widely-used public key encryption scheme based on combining a Key Encapsulation Mechanism (KEM), a Key Derivation Function (KDF), and an Authenticated Encryption with Associated Data (AEAD) scheme [HPKE]. It is the foundation of the Messaging Layer Security (MLS) protocol, the Oblivious HTTP protocol, and the TLS Encrypted ClientHello extension [RFC9420] [RFC9458] [TLS-ECH].

This document defines a collection of PQ and post-quantum/traditional (PQ/T) KEM algorithms for HPKE, which allows HPKE to provide post-quantum security, as discussed in Section 7:

ML-KEM, X25519, and P-256/P-384 are defined in [FIPS203], [RFC7748], and [FIPS186], respectively.

This selection of KEM algorithms was chosen to provide a reasonably consolidated set of algorithms (in the interest of broad interoperability), while still allowing HPKE users flexibility along a few axes:

We also define HPKE KDF algorithms based on the SHA-3 family of hash functions. SHA-3 is used internally to ML-KEM, and so it could be convenient for HPKE users using the KEM algorithms in this document to rely solely on SHA-3.

2. Conventions and Definitions

The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here.

We generally use the terminology defined in the HPKE specification [HPKE].

There are two meanings of "hybrid" in this document. In the context of "hybrid public key encryption", it refers to the combination of an asymmetric KEM operation and a symmetric AEAD operation. In the context of "PQ/T hybrid", refers to the combination of PQ and traditional KEMs. For clarity, we always use "HPKE" for the former, and "PQ/T hybrid" for the latter.

3. ML-KEM

The NIST Module-Lattice-Based Key-Encapsulation Mechanism is defined in [FIPS203]. In this section, we define how to implement the HPKE KEM interface using ML-KEM.

The HPKE DeriveKeyPair function uses the SHAKE256 KDF (see Section 5) to derive an ML-KEM decapsulation key in the 64-byte seed format, then uses the function ML-KEM.KeyGen_internal from [FIPS203] to compute the corresponding encapsulation key.

def expandDecapsKey(dk):
    d = dk[:32]
    z = dk[32:]
    (ek, expanded_dk) = ML-KEM.KeyGen_internal(d, z)
    return (expanded_dk, ek)

def DeriveKeyPair(ikm):
    dk = SHAKE256.LabeledDerive(ikm, "DeriveKeyPair", "", 64)
    (_expanded_dk, ek) = expandDecapsKey(dk)
    return (dk, ek)

As discussed in Section 4.4 of [HPKE], the value of suite_id used within LabeledDerive identifies the KEM in use:

The GenerateKeyPair function simply calls ML-KEM.KeyGen_internal with a pseudorandom dk value. As long as the bytes supplied by random meet the randomness requirements of [FIPS203], this corresponds to the ML-KEM.KeyGen function, with the distinction that the decapsulation key is returned in seed format rather than the expanded form returned by ML-KEM.KeyGen.

def GenerateKeyPair():
    dk = random(64)
    (_expanded_dk, ek) = expandDecapsKey(dk)
    return (dk, ek)

The SerializePublicKey, DeserializePublicKey, SerializePrivateKey, and DeserializePrivateKey functions are both the identity function, since the ML-KEM already uses fixed-length byte strings for public encapsulation keys. The length of the byte string is determined by the ML-KEM parameter set in use.

The Encap function corresponds to the function ML-KEM.Encaps in [FIPS203], where an ML-KEM encapsulation key check failure causes an HPKE EncapError.

The Decap function corresponds to the function ML-KEM.Decaps in [FIPS203], where any of an ML-KEM ciphertext check failure, decapsulation key check failure, or hash check failure causes an HPKE DecapError. To be explicit, we derive the expanded decapsulation key from the 64-byte seed format and invoke ML-KEM.Decaps with it:

def Decap(enc, skR):
    (expanded_dk, _ek) = expandDecapsKey(skR)
    return ML-KEM.Decaps(expanded_dk, enc)

The constants Nsecret and Nsk are always 32 and 64, respectively. The constants Nenc and Npk depend on the ML-KEM parameter set in use; they are specified in Table 2.

4. Hybrid KEMs with ECDH and ML-KEM

[CONCRETE] defines a collection of concrete PQ/T hybrid KEMs. These KEMs combine ML-KEM with a traditional ECDH group:

MLKEM768-P256:

ML-KEM-768 and P-256

MLKEM768-X25519:

ML-KEM-768 and X25519

MLKEM1024-P384:

ML-KEM-1024 and P-384

These KEMs satisfy the KEM interface defined in [GENERIC]. This interface maps to the KEM interface in [HPKE] in the following way:

def DeriveKeyPair(ikm):
    seed = SHAKE256.LabeledDerive(ikm, "DeriveKeyPair", "", 32)
    return KEM.DeriveKeyPair(seed)

As discussed in [HPKE], the value of suite_id used within LabeledDerive identifies the KEM in use:

5. Single-Stage KDFs

This section defines HPKE KDFs for eXtendable Output Functions (XOF) based on Keccak. SHAKE is defined as part of the SHA-3 specification [FIPS202]. The related TurboSHAKE XOFs are defined in [RFC9861].

The Derive() function for SHAKE is as follows, where <SIZE> is either 128 or 256:

def SHAKE<SIZE>.Derive(ikm, L):
    return SHAKE<SIZE>(M = ikm, d = 8*L)

The Derive() function for TurboSHAKE is as follows, where <SIZE> is either 128 or 256:

def TurboSHAKE<SIZE>.Derive(ikm, L):
    return TurboSHAKE<SIZE>(M = ikm, D = 0x1f, L)

The Nh values for the KDFs defined in this section are listed in Table 1.

Table 1: Single-Stage KDF IDs
Value KDF Nh Two-Stage Reference
0x0010 SHAKE128 32 N RFC XXXX
0x0011 SHAKE256 64 N RFC XXXX
0x0012 TurboSHAKE128 32 N RFC XXXX
0x0013 TurboSHAKE256 64 N RFC XXXX

[[ RFC EDITOR: Please change "XXXX" above to the RFC number assigned to this document. ]]

6. Selection of AEAD Algorithms

As discussed in Section 2.1 of [PQCE], the advent of quantum computers does not necessarily require changes in the AEAD algorithms used in HPKE. However, some compliance regimes call for the use of AEAD algorithms with longer key lengths, for example, the AES-256-GCM or ChaCha20Poly1305 algorithms registered for HPKE instead of AES-128-GCM.

7. Security Considerations

As discussed in the HPKE Security Considerations, HPKE is an IND-CCA2 secure public-key encryption scheme if the KEM it uses is IND-CCA secure. It follows that HPKE is IND-CCA2 secure against a quantum attacker if it uses a KEM that provides IND-CCA security against a quantum attacker, i.e., a PQ KEM. The KEM algorithms defined in this document provide this level of security. ML-KEM itself is IND-CCA secure, and the IND-CCA security of the hybrid constructions used in this document is established in [CONCRETE].

Another security property that is salient in some use cases is "key binding". In [CDM23], these notions are referred to with the shorthand X-BIND-P-Q. The most salient for protocol design provide assurances similar to those provided by transcript hashing in protocols like TLS:

LEAK-BIND-K-PK:

If the sender and receiver have the same key (K, shared_secret above), then there is only one encapsulation key (PK, pk) that could have produced it, even if the decapsulation key is leaked to an attacker after the encryption has been done.

LEAK-BIND-K-CT:

If the sender and receiver have the same key (K, shared_secret above), then there is only one KEM ciphertext (CT, enc) that could have produced it, even if the decapsulation key is leaked to an attacker after the encryption has been done.

DHKEM and ML-KEM meet these properties, as shown in [CDM23]. The hybrid KEMs used in this document also provide these properties, as discussed in [GENERIC].

7.1. PQ Hybrid vs. Pure PQ

Assuming that ML-KEM is secure, either the PQ/T hybrid KEMs defined in Section 4 or the pure PQ KEMs defined in Section 3 provide security against a quantum attacker. Hybrid KEMs can be used to provide security against a non-quantum attacker in the event of failures with regard to the PQ algorithm, including both implementation flaws as well as new cryptanalysis. See [GENERIC] for further analysis of hybrid security properties.

7.2. Asymmetric-Key-Authenticated Modes of RFC9180

In the [RFC9180] version of HPKE, KEMs could optionally define the additional functions AuthEncap and AuthDecap. These functions allowed a sender to authenticate the message to the recipient without interaction.

The KEMs defined in this document do not support AuthEncap/AuthDecap and cannot be used to migrate uses of HPKE that rely on this mode. PSK-authenticated HPKE (Section 5.1.2 of [HPKE]) or digital signatures may be suitable alternatives.

8. IANA Considerations

This section requests that IANA perform three actions:

  1. Update the entries in HPKE KEM Identifiers registry corresponding to ML-KEM algorithms.

  2. Add entries to the HPKE KEM Identifiers registry for the PQ/T hybrid KEMs defined in this document.

  3. Add entries to the HPKE KDF Identifiers registry for the SHA-3 KDFs defined in this document.

8.1. Updated ML-KEM KEM Entries

IANA is requested to replace the entries in the HPKE KEM Identifiers registry for values 0x0040, 0x0041, and 0x0042 with the following values:

Table 2: Updated ML-KEM entries for the HPKE KEM Identifiers table
Value KEM Nsecret Nenc Npk Nsk Auth Reference
0x0040 ML-KEM-512 32 768 800 64 no RFCXXXX
0x0041 ML-KEM-768 32 1088 1184 64 no RFCXXXX
0x0042 ML-KEM-1024 32 1568 1568 64 no RFCXXXX

The only change being made is to update the "Reference" column to refer to this document.

8.2. PQ/T Hybrid KEM Entries

IANA is requested to replace the entry for the value 0x647a and add two entries for values 0x0050 and 0x0051 with the following values:

Table 3: PQ/T hybrid entries for the HPKE KEM Identifiers table
Value KEM Nsecret Nenc Npk Nsk Auth Reference
0x0050 MLKEM768-P256 32 1153 1249 32 no RFCXXXX
0x0051 MLKEM1024-P384 32 1665 1665 32 no RFCXXXX
0x647a MLKEM768-X25519 32 1120 1216 32 no RFCXXXX

8.3. SHA-3 KDF Entries

IANA is requested to add the values listed in Table 1 to the HPKE KDF Identifiers registry.

9. References

9.1. Normative References

[CONCRETE]
Connolly, D. and R. Barnes, "Concrete Hybrid PQ/T Key Encapsulation Mechanisms", Work in Progress, Internet-Draft, draft-irtf-cfrg-concrete-hybrid-kems-03, , <https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-concrete-hybrid-kems-03>.
[FIPS186]
"Digital Signature Standard (DSS)", National Institute of Standards and Technology (U.S.), DOI 10.6028/nist.fips.186-5, , <https://doi.org/10.6028/nist.fips.186-5>.
[FIPS202]
"SHA-3 standard :: permutation-based hash and extendable-output functions", National Institute of Standards and Technology (U.S.), DOI 10.6028/nist.fips.202, , <https://doi.org/10.6028/nist.fips.202>.
[FIPS203]
"Module-lattice-based key-encapsulation mechanism standard", National Institute of Standards and Technology (U.S.), DOI 10.6028/nist.fips.203, , <https://doi.org/10.6028/nist.fips.203>.
[GENERIC]
Connolly, D., Barnes, R., and P. Grubbs, "Hybrid PQ/T Key Encapsulation Mechanisms", Work in Progress, Internet-Draft, draft-irtf-cfrg-hybrid-kems-12, , <https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-hybrid-kems-12>.
[HPKE]
Barnes, R., Bhargavan, K., Lipp, B., and C. A. Wood, "Hybrid Public Key Encryption", Work in Progress, Internet-Draft, draft-ietf-hpke-hpke-03, , <https://datatracker.ietf.org/doc/html/draft-ietf-hpke-hpke-03>.
[RFC2119]
Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, , <https://www.rfc-editor.org/rfc/rfc2119>.
[RFC7748]
Langley, A., Hamburg, M., and S. Turner, "Elliptic Curves for Security", RFC 7748, DOI 10.17487/RFC7748, , <https://www.rfc-editor.org/rfc/rfc7748>.
[RFC8174]
Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, , <https://www.rfc-editor.org/rfc/rfc8174>.
[RFC9861]
Viguier, B., Wong, D., Ed., Van Assche, G., Ed., Dang, Q., Ed., and J. Daemen, Ed., "KangarooTwelve and TurboSHAKE", RFC 9861, DOI 10.17487/RFC9861, , <https://www.rfc-editor.org/rfc/rfc9861>.

9.2. Informative References

[CDM23]
Cremers, C., Dax, A., and N. Medinger, "Keeping Up with the KEMs: Stronger Security Notions for KEMs and automated analysis of KEM-based protocols", , <https://eprint.iacr.org/2023/1933.pdf>.
[PQCE]
Banerjee, A., Reddy.K, T., Schoinianakis, D., Hollebeek, T., and M. Ounsworth, "Post-Quantum Cryptography for Engineers", Work in Progress, Internet-Draft, draft-ietf-pquip-pqc-engineers-14, , <https://datatracker.ietf.org/doc/html/draft-ietf-pquip-pqc-engineers-14>.
[RFC9180]
Barnes, R., Bhargavan, K., Lipp, B., and C. Wood, "Hybrid Public Key Encryption", RFC 9180, DOI 10.17487/RFC9180, , <https://www.rfc-editor.org/rfc/rfc9180>.
[RFC9420]
Barnes, R., Beurdouche, B., Robert, R., Millican, J., Omara, E., and K. Cohn-Gordon, "The Messaging Layer Security (MLS) Protocol", RFC 9420, DOI 10.17487/RFC9420, , <https://www.rfc-editor.org/rfc/rfc9420>.
[RFC9458]
Thomson, M. and C. A. Wood, "Oblivious HTTP", RFC 9458, DOI 10.17487/RFC9458, , <https://www.rfc-editor.org/rfc/rfc9458>.
[TestVectors]
"HPKE Test Vectors for Post-Quantum Algorithms", , <https://github.com/hpkewg/hpke-pq/blob/main/test-vectors.json>.
[TLS-ECH]
Rescorla, E., Oku, K., Sullivan, N., and C. A. Wood, "TLS Encrypted Client Hello", Work in Progress, Internet-Draft, draft-ietf-tls-esni-25, , <https://datatracker.ietf.org/doc/html/draft-ietf-tls-esni-25>.

Appendix A. Test Vectors

Each section below contains test vectors for a single selection of HPKE algorithms and contains the following values:

  1. Configuration information and private key material: This includes the mode, info string, HPKE ciphersuite identifiers (kem_id, kdf_id, aead_id), and the recipient's key material. Recipient key pairs are generated as (skR, pkR) = DeriveKeyPair(ikmR). Key pairs are written in their serialized form (as produced by SerializePublicKey and SerializePrivateKey). For the PSK mode, the shared PSK and PSK identifier are also included.

  2. Context creation intermediate values and outputs: This includes randomness ikmE used for deterministic encapsulation, the KEM outputs enc and shared_secret used to create the context, as well as the context values key, base_nonce, and exporter_secret.

  3. Encryption test vectors: A fixed plaintext message is encrypted using different sequence numbers and AAD values using the context computed in (2). Each test vector lists the sequence number and corresponding nonce computed with base_nonce, the plaintext message pt, AAD aad, and output ciphertext ct.

  4. Export test vectors: Several exported values of the same length with differing context parameters are computed using the context computed in (2). Each test vector lists the exporter_context, output length L, and resulting export value.

Deterministic encapsulation functions for ML-KEM and the hybrid KEMs are defined in Appendix B of [CONCRETE] via the generic construction in Appendix A of [GENERIC]. The EncapDerand() function defined in [HPKE] corresponds to the EncapsDerand() function defined in [GENERIC].

These test vectors are also available in JSON format at [TestVectors].

A.1. ML-KEM-512, HKDF-SHA256, AES-128-GCM

A.1.1. Base Setup Information 

mode: 0
kem_id: 64
kdf_id: 1
aead_id: 1
info: 3466363436353230366636653230363132303437373236353633363936313665
      3230353537323665
ikmE: a4f31f1285babd975087bad56c61ce3947c2f537d4256e184f5657f8ba4c7668
ikmR: 53c72362cd4c0d3c04fb963bb2d8fa3b61be2a83befb53883892f68d1e6af3ee
      2ab07a445a87cd505fe27f3434e35c8ad26e6452b51f24e5c9d3d174b326fb0e
pkRm: 3e774db858732c35a408388fceb66cc61777d361c85a72b1e844422cca0effcb
      5778cc5de43acab0ec682b0b318fa4122bac224d10c193b5933758320587196f
      d50cf76c94a1222b2a330a9fdb32b0ec8a42931c531bb025095e49fc0df8a520
      5b32149e7354d63232c8199dd9e6654ec0bef0937484b0904950b05b29297dbb
      410be008ad441ebce23052c8cda593bb1bf4b5e0e520ac4a53e9a1bc38591c3f
      723e66c177a6715d3a365b0c156a5f72aa439ccb42944b8f47a32b446ab6d8ce
      58096a778a2322b3b467f2c5a17875fcd6a69ee74ea297093798765f6851e640
      2b77c723b335c5c8857d94090d41fa2b5e54ce5b7194d29175f141718c36959e
      6142402b2e816a856d914b1f2b3fc62329cccc7e23fb9d14828e44941997b323
      bcc90c497579d49462d79671809a38d79c3137cc4258563134d4662872260cc1
      3b5c990215959721082c827bab0cb9a2559b16eb704cdea7cfe60b24224b13d0
      55b382ea9e0920adb3592689b3635239ccf8db631f585957a37c57fa8d92fc79
      07d0266dca9b55fa5b68d308d8d6cbdcd8b583fa804c03ac620003911b506396
      709bea2ad1a7a83f697c9ec741cf650464bac0093a0efd462207620c13b86cc0
      dc10dc9442870250390384c5e2b8f5294f9c88b26b09c8d504c286d16109a568
      38830caa35b231811bda3a1677d3087ce216ed9c8ce5cc4020d290efcc60ded5
      11bb990795d00674a12641e885ceda249e387ce470716188cd359c66f4e61908
      e12757b97c3095168fb8714681a96c54c1cd401231a5500896a8eabaa521da68
      0e759222d9765746624ab6c79a754b10477a0ae12ba2175f6f701569bb15d2eb
      c4e6e9b8e6f1c021b31edccb152ea23365db5ef396c893a9ba12cca8a3847e99
      f6c732523e55844a17ba34cbd6042d1b7ffdc47d6031a7587162ada1a283267e
      aaa31da17cc611038fff51446e0384c7397450b05084859cb8f79e6a1775710a
      19f8e9896e83861debc6ffe1ba8ebb1cdee95da61c30f6c99091e31b4f3c5933
      52a1253910261c187c60a420e1445951cd797b74a4a7b53b50b0c1370e69e65f
      cd29aa553682cc42f6802ac4b8a3bd7b1c482ff85523aa2848b95ee9654b55af
skRm: 0466a81fc187205d5925aaa518e98d6cbde2a1aa63d756da4a62f873f6a0b1f1
      418d0eec2620055b8537aca724d18ad436e47972f85f4c5c5d2cfb1c62b100bd
enc: a66b74747cbe84af3c6c824792211ab3b5ce0847f49090036c4ebf5b9767a6564
     c0c6cd52137245582e773b5dbf530ade89b05e7df571c278476b5f874e5aa1590
     a47d9ee2c4d2c447eb4a070e86ff448bec7d38412cb7df4463b2d42ce0691d59a
     97c25f0a2b6b39f07ab04e4c9b11e6a27a738e9c3b6869ca803602b5fb78f071e
     3f447845fde4d1d0893f650ea246eb599bcfbef61e3d5f03c6a20bcb99c610a22
     712045c8e37f549c353949ce27bfdd953bfef97469e1a46696dde84326dd6a7eb
     79af9107ede1b61f4d5d17c8859a604dc0b67fc712f545efbc8ab6bba66931396
     769874794ad44654d63e57fb36a8ed188c9dff164100eb26581d0853719f88619
     220ba1815f8d737727a35bc33227e2580c5b68baec549e0cb722caf24a4ee28cf
     585cc12e7de2a845a5b0599cccd94a49be72acd52e0eb1c26cb764bac0e25e93f
     c015456ea2f6f2807a47a46fe5c1715394a5a913812ee17a4684b9857f229b61a
     dd7440301e12d00b4cb2c406a28de76bfc31b5c239dc96d94a3f29f3a85b50711
     8d0c66fca652c33da63dc246024f429399c1cd9531e6e85c6ef30d6954270c895
     c5e318744b5ed728ea326f242e1be5c519bccdb01668704d1328afd97476157e1
     322525b994a7a48d3ed1b9097a9eb632b84a92e257ef191fb5e469cfc9a594317
     5b7c52e3e0a83d6df64038fde3cc2938bed141a5e19011247f87183602f5b98dc
     495fbdf463e8ede9da6f970632dad9cea242e91d1681ba801be84190e1a13e6d1
     820fe846945a41d920b1f717f12b10d70a9b203377316bfd3f6217b758a949a89
     9de90119e934fdf0daae68f6a8b0b89f93064c727e14691c4149c1147d1ae457d
     127eda31a4b63fd8aa7f5e501b3e1de20ee1024c7cb0010a0996adebb9527c491
     9ac3903296ca8253facf1a225faa95aa7b26889a1302132cbfb519cda8cb60dd1
     4646c3e94cc335881015b0e63191b82711fd498442cb448cec3c2581e26019632
     f66c2d301261e199026eebb351866d82212c1a5b4acef12e7c22f4597c185301c
     f606f6ce69482f81a630539d3cd1611875fa28a1d
shared_secret: 996dfcdb0c50e9fa4748dfaf6a641ff4e26de2f84e1d19047f5bb05
               89043e194
key: 7bdfa98081ef3777a154d3cd10018539
base_nonce: b9bc4aba6b886a03673e7083
exporter_secret: 2e2fe69cfa6dc979c005cd7adeee7d44a76f2aee89210b36e7a96
                 7fab89069a7
A.1.1.1. Encryptions 
sequence number: 0
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d30
nonce: b9bc4aba6b886a03673e7083
ct: c80cc04803277f688c29c5c0a9f222f1977c7bfc5cc5e66ff4210c5bc315ceb347
    135531581a411dc61bb35059a781fbf8c52e9539c1e55bef647086ea64a7cf3e5d
    6c4211f38f747276

sequence number: 1
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d31
nonce: b9bc4aba6b886a03673e7082
ct: f3c5de027b9b14bfe43fcfdd66c136b47ccfeb03096a212f480c74bdbd2987c984
    4b103d16ce2d98dfde273ac757a389bbe1ddf7295c1b6903495fe54caeb337f7a1
    856f3861a888a051

sequence number: 2
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d32
nonce: b9bc4aba6b886a03673e7081
ct: cd629625b73b85743e4d88636a9459d0222e45704d7a5d0bb22b8aded487731c71
    73b090fe56293d06e822c087ea227271e08e1f6ef7a3b17e630f4c745458067236
    62fb03fa8b6d059e

sequence number: 3
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d33
nonce: b9bc4aba6b886a03673e7080
ct: a67fdc43fdd76a2855141ae9658e00f0b9a8fed0c4d39d909e8545c2fe0116a046
    f0497ffc3e82cbf98e95f7a904cbe7e762bafefa2bd4778a4b314e08face73e478
    7a6d7c931d648a5f

sequence number: 4
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d34
nonce: b9bc4aba6b886a03673e7087
ct: a188bb14db42930838fbd89529f61afe0bd6c0f69c80df4ffac6a23496063dae97
    cadf414f07cfa6911756fdb217a5ecad4cd6939a22ea43b3bbeb22c6a693b7388f
    5521cbfcbacb9b4d

sequence number: 5
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d35
nonce: b9bc4aba6b886a03673e7086
ct: 420090b7e3df69318525d3b2e92457314b6f46ae8b9df23e7c0281220d9bee9f6e
    4da96aa152f323df7ade4394ae8adbe3fd0596bcf47150df455256b90785749459
    53c3f281d99d09ab

sequence number: 6
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d36
nonce: b9bc4aba6b886a03673e7085
ct: 5abfcc4c7b18a59b59035f21763ef08ceee47c5f45791f8c9925c57befa130bfd4
    5cfe4b285f0523687e00ae1362aa771a2f35140ea92570fec2e0d4729764c5eee3
    c65a391491fc6324

sequence number: 7
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d37
nonce: b9bc4aba6b886a03673e7084
ct: 0570c5db7c995d69180d5b4fc031d065dac7833a3e1891e23c2d84a8e1286ab83c
    5066ddbca722552d9f67687e9a627cfac6e4429295c4470f832906571726d0a1ab
    78ac04a52e8b74e7

sequence number: 8
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d38
nonce: b9bc4aba6b886a03673e708b
ct: 31e1aebec642edeac620b97333caca70d5a747d05fd41f17134e919c827515c897
    7cfa7238032a33bd4da61a4e10688d2e338ea92741de85a76ec393b06228c558b2
    e49692b15be681cd

sequence number: 9
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d39
nonce: b9bc4aba6b886a03673e708a
ct: 59047cd54181a97057b845b22b88dbbab6dd37c862f837cf428b932c8027439f15
    120082c5630a6021361bcc00d6dc4bdf6d4840d0772ca8be99e5c40b448029ef3c
    f320b6b63d3eb6da
A.1.1.2. Exported Values 
exporter_context: 70736575646f72616e646f6d30
L: 32
exported_value: c0186fd042852629d81ba939012f98d444a5c19bd7cee946389fa0
                16cbb3d9a3

exporter_context: 70736575646f72616e646f6d31
L: 32
exported_value: d4db343a5d04f812edac36da2b3bf29cbbb10e058b94de2a9a3cca
                bc621783bf

exporter_context: 70736575646f72616e646f6d32
L: 32
exported_value: f9ba1dbc672d27b24880c74d16417c0e6e0e0ff68fd37684aa654b
                3e915289a3

exporter_context: 70736575646f72616e646f6d33
L: 32
exported_value: cb7c0165ab19dad598712b092c3b03b9569aa042582a7c3750aa00
                2015103386

exporter_context: 70736575646f72616e646f6d34
L: 32
exported_value: c6c8ffed2d6900062c3ec5c92ea82fd68d2063325f320e269d3f1a
                c8a0530ad4

A.2. ML-KEM-768, HKDF-SHA256, AES-128-GCM

A.2.1. Base Setup Information 

mode: 0
kem_id: 65
kdf_id: 1
aead_id: 1
info: 3466363436353230366636653230363132303437373236353633363936313665
      3230353537323665
ikmE: 9b933cd9c9421cd58db0c5f6cea53eedbd7fae056ff95d688d8ed9a58177e76b
ikmR: a60b35f174ce9ac7a4ff5b9f81e38125b03506ecbd56a3a55c31ece0f5907052
      0729773a61a499d5137daaef824b493848b6e4dd332a815ff19aa9f58a381eb8
pkRm: 1a9664765a7f3322c86c451287f56dcafb799cc39a17e8c33f911a8703b90b3a
      99bbd712962c0eb0b9cca65843cd784ada958b261116dea17e0fa2533ca23498
      c0793078c5b8254d2a162e4042085d3c164d4615270bb56e4393672056c9f1ba
      bad3b95307b04ed54caa699bcc3cb24b1b488fcc5448d65bf9d8cdb9cc2140b7
      a18535232c14432e4bcba045bf80e00c8110679375406f278e96218de5662436
      d96b161829d23bceb66c338b78ab2eb956f90b867738754763ce13f35eac655a
      eae10949a582810a625964a58f1a6d15ea52ceabb463b211e0e1b19f736e1af4
      a7d2c02485a4538b1551fcccb996a605ec93719c876a5c86a8782b78565c603c
      538856228257033831eb99072a1a2d0413b007a7fa9a013efca0ca9800bae097
      b12790506640cbbbb903d545b87a20adabaebc7c46c781a11fc08f3dea902a30
      64ceab86525a3e33758e1fc76d17eb9796e0afce3099e2b64300d4586b24ccf2
      9185c1e26b0ae29925527e79607e48786d27d651a290174f966200b3cea6b28a
      dd1368a410c753b692f5388763e9530e3a4db61627a56b70d6fc545e5b8712d3
      546a7c0548a03efe3a1312091434133520b21dc04b6d8b70c01894ca5714cd81
      1b6f8b671544575bb5016d5e8788abb0206b22a7d8f64a09ca4f4d773ec7029a
      6bec726aa612bec0213377b3cc8a9218b465abc8b242937fabe57ae932151092
      c3cba5ae2734088f67244346c93a024506485af5f7ae6a8257f04b912e6c5ab9
      f12777473b8efb73a8056ee006294ae93ea03a204a09a858d87b09d425881819
      716b4cee09461daa8fdba8ad0ee81aeb60bd9ab59ba9c59381d3b147244c1d22
      85b5d79d5154abb794170a945c1a0acf2e4c82a5093371836bd153b6c9bb0fd3
      f21cc682bf1ad8467ebc88002840815a1bbd340603a8a45c002c3613503c6ab4
      e8620150c2331987559d6987900a803b05bd4b609f3ef6cbfb74c854eb83552c
      3db404af93746918eb7afd920434681a2eb618259c791ae58fa7e43fc083c14e
      3001e09c82e3e31efe61a2126936a7560a4239c85d366d01c67d08a2158d3605
      e1a8335e42b4c1d8457be130451968ab3c4325553923442892c9bd2a238b9429
      02b6d1cf5603674811020330c9b8f77d274c885a982167ea995aab3c4ad4c15a
      2368ab8bbcb3f27064e3cbea93b652c869db424f7722839f4b55e1acafd0a4b1
      d6b561c3a416cfa2c175933da440b01daa4970e3b1888814dc972fd27030b150
      51d8348ac75b91752304acf3961670341b334fe9591fd60469d1dac085ca745a
      e0cbd7d48f951746ac523c42679a105978af3a36dfe36bcccb9386b96c3c4984
      83d7c8ad869204d7a298d085105c8cd40601782a874bb8337bd00a2cf39650dc
      499bf32e67233219bc597165124e194252d47f23d78df18b43dcaaa29640269f
      f9197db15ebf919b3c702e16c01dd80881f627600d35c60c059daa53cd6114cf
      29f739302996cb3132e17a2e852038569223e2fcc23f6a90559b9b4a1059d85b
      827fe2568558376cb946f9bca484030988e53f61431ab60a276d9b43a85b3863
      7aa017535533a00f72064602948c83cb1e050b0584a7628b2697d23476af2b0e
      68b5d57d4718ede11de2080798a309cc8102fff10ad012bd3d32efdc2052d8fd
skRm: 80008d036609972cf761d7e2d3b831e48d3e941cda94fbf9bae09bca87373f9b
      b7411f58fd3324ba1d0daa5a7b42768c5b53e1df29c28d4f5428a8233a905089
enc: 86a740f005d8a10afb812bf6d0a97ea0c2a5c7a729af0c286418726ace6699544
     5a5f6fc099b498ac3ef9e752ddb7ef88bec618c7fb4516385d681328381924c07
     23d92ffc9765a25ee558e29b1f7e8a38aff5debec491ef6fbbdca10170f54c2bd
     08aec077920e59380e5cd81983cecc15b2c4b201f2c2cf70640eeee3224a7849d
     8efc6404b317ef3b81be28dc1334ab4c71b16682db94ae7115da8069fef82a9db
     a4ea1671cfb5707333e4e107631016934480368514d3ead43fb3c916dba86da20
     71066d288b12b8c9397757e643c41ed7e240c5bdd924e30d923e90af5d03b7adf
     e1a3bb055195d37309e28a55a10ee859f812d06145a6346354ca8dfd72a829ef3
     48de166d5dde7e41f60d3387933b41ce33d29c134ab96f2982c513884e7bcb790
     d31f0a8371e990c6cc9c1572d25d0efc7c0e979c88e1b6935d74b7ba78d53837c
     a5e486e8da5e6055d13e0a1f566cbde09caa2e73c1c1f0afb2f7db73a820a738a
     997639a96dac040e72eb8b18f48e7d9e964e3625ac12883a8a10d2f4f907e7703
     021347885081ef38c8445698717b947aa7df75f1dd3c320b71a431dd5d18b0de1
     ed307dba95a201aaf8ab37d8edd71c5da6097cfea602429abafd9924de42757fc
     d203b8bc6feafdac6d4178c7dfeda5435eba612a0a0c603171ce6ec491363c706
     730667445f69c9754ec0922c9f5dd593894f5c5a9284888376d22002242831bab
     cb86feb2c7ec5df5b463e2469fd7a80d4aa6ce8ac21f48dbb95de64ddf15b1bd0
     f65548122f8f61c9f41a3ea75a2d66e970a04a79dc73c73b3e1ae0420677dcece
     4b36338d01ef7ff381a09c9aaffd1fc4f46c2461c0b8ee92de43379f086151d70
     65c4acac7a3ffe9205db754f717f9108ae4e364f6f375acf5a565de7e2c1249a3
     53df05258c8eafdda03410ba2778714cacb64f61d494c4d5bcb420f718954a1db
     1e937df6b2483ca88b3d78476d3b2c78fe068ac2b584832c73fcccd2ac38aad93
     e35c717c1e172ac096eb2909f63ba780d009fc7c83b3acfe5be95be3ab11c25c8
     6638a2cf3a2ebd23cb15b501c77eca0a28dc0a621ef1f337fcd7138e01d1324e9
     85bd7eaf6d745530334b052b8d5c5b22064a623b9c7960d128e1665c8c7f8869d
     5afe7ed40f02f02edff64c577fd1084253aa40b1f8482725f6416f3e4d59add50
     02ba6b6d5b7be87a1aa3af89bba6c40838011f93dbb1bda2ecbd24a446619d158
     41f1ece8e0fb7769bd350d6bdd23ad074d0ef2d683bd7a6e64e97039aa92ea70f
     84f42ccc6ae0871da60362de0dfc6ea338dcae3eb2bf4c0e0746588faac369eb8
     b6b0e38a7a96d265fc5d4a91c994158168757e9750c80a90b571ec6c914eebf67
     901c7974732947d3871e41c9d59cd78bfd8e7e1fa6023545d54d2070ef64ecb70
     daa01f0b508764f6a3ad19d680927e78f86a664e62313b57941524bd9b691cfc5
     14ecca83e172bc1e0c2b2b62ea7d896b3f4218fe39c1fd892b9852ac170524524
     205ac19ac58102a4e7562d2dd453d80
shared_secret: 750477fb7421ec8e787e4505a99278b0c8aa15b9783453e90939cf1
               527617dac
key: 7d1031a2d6d232331f70495250fabb0d
base_nonce: 5974495634213151b309dfd3
exporter_secret: abafcbaa704ff2bcd964ec7a3ad23cc66ff02f0df43576d744a4c
                 2cf1f51e581
A.2.1.1. Encryptions 
sequence number: 0
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d30
nonce: 5974495634213151b309dfd3
ct: 4b7dd443eecc37d978fb2e41808d8b3025e0afdefb57b96be0b2ee1c1e437a6a67
    6e379812eac544f55e463d07b20cbe88225ba97736c48ba39bdd96bcd783b43a67
    eedb77bcd612820b

sequence number: 1
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d31
nonce: 5974495634213151b309dfd2
ct: 86e2d78ff8f07fc10e651796c0b51516200dfa224b35a99b460c9147eda0a42266
    cffa5763709ad8ff6ac0db08ac9a33ce4e8eab643380ea55fcd1d272dc8ecbed98
    d3b8e60a53805187

sequence number: 2
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d32
nonce: 5974495634213151b309dfd1
ct: 0908bf6f5163b23a220d8217ad53ec21dc8dbeb10d0ef86fb116c0c4a29a56a88b
    49b596ac7b90483b2bc64bdeb23006973992aaab358e825259acd3b56b80eafa63
    5abc230911af016c

sequence number: 3
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d33
nonce: 5974495634213151b309dfd0
ct: 5b954fb94c939049b353a048602554ab2f57492e0f1de9212d805109cc967ed2ae
    adb201a300a6e7974af067796292b9020dff0379428b8583de25bf5c2c837f4371
    702e64974ef15f07

sequence number: 4
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d34
nonce: 5974495634213151b309dfd7
ct: dd49fd3e866b6dd14af37d0cbf7b513a2bbf7657e676a858f4805561f28e046db1
    a808e43b9cbee3041c4a324289725a85621fc3de8344bc98c0f4706b4dbd8beff8
    414ca86540a51033

sequence number: 5
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d35
nonce: 5974495634213151b309dfd6
ct: 831a48817c5d45e330753a17cee36cc20326627e4c76e7e549a8448565d045a535
    0e609d42e0d1b717182f9907aea04df58ddc4567cb5a10610ce0c3604fe67ced8c
    52b1763261ce9a3f

sequence number: 6
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d36
nonce: 5974495634213151b309dfd5
ct: 5336076be19a0484403aac51a5e4459c03e0568ea9134d39540b1836f29a614e1c
    36cdcd55cb88e3e880d034ec7a0667bc07b67e1af39d9742993013225d4f07a1cf
    6b65352e4fdb010a

sequence number: 7
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d37
nonce: 5974495634213151b309dfd4
ct: 155ecc67e13d547588a220c2bc91ccac84408a109fdc14f9e94bfacac69fad1399
    0f69944d14b46cf64ea95a9012f25e04a3dd1e6bb2ba7504cdfbe4bfdab29c81d2
    bc7677f118a3d2ca

sequence number: 8
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d38
nonce: 5974495634213151b309dfdb
ct: 1b48a0017b4a6c70b3f19795e4b4ec4e668446b73127e737ea06e0a8d25f2d2126
    23bc3fe4c6b8fc508279d7e01edf441581f4647b4be97958658cfe06dd1c3bfce1
    7345204184ec1a04

sequence number: 9
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d39
nonce: 5974495634213151b309dfda
ct: a8620253f72db37e2aa316a375f08c62b466546c84669a024194e7d36fd9864d53
    25420123e2ff4dafd016638a3c138a729bb57f0f1a4dc6c072801bb3f66b3f4794
    688206b69c9fb284
A.2.1.2. Exported Values 
exporter_context: 70736575646f72616e646f6d30
L: 32
exported_value: 4ce822c6932f0cbc2f1fbc3a652bbef4976ac63833d35fcce20b35
                c4a3d05443

exporter_context: 70736575646f72616e646f6d31
L: 32
exported_value: f8a7549322f1921e48ffc17b05b71d54640bb0253c6e4589b0ee74
                8120d9e735

exporter_context: 70736575646f72616e646f6d32
L: 32
exported_value: 7be483d9a999b4ae759bc3ea1a713bc989540fdc376c36472a7c10
                38a6c6ee04

exporter_context: 70736575646f72616e646f6d33
L: 32
exported_value: 9acdf000eb38f40b663ac4f05e2e86409499bf40dd5b439303b4e5
                75b2091e53

exporter_context: 70736575646f72616e646f6d34
L: 32
exported_value: 4a48d80f407a18636fdac0d912020bc134e33d1e30e0be7fd36fb4
                b56d9849da

A.3. ML-KEM-1024, HKDF-SHA384, AES-256-GCM

A.3.1. Base Setup Information 

mode: 0
kem_id: 66
kdf_id: 2
aead_id: 2
info: 3466363436353230366636653230363132303437373236353633363936313665
      3230353537323665
ikmE: 54e68c4d0f72b94d956acf637c23570e505db5c08c0068bd136cacbc7dedda89
ikmR: d6688a981deeff1d1273426af8a44aab877c50b6e8ac74b11e01a5960d97c03b
      ffd9634894d255c424c80c74e0930b85b9f4c60e22a3efb09f4bad4749be427b
pkRm: aa0a1b451a9aa747370a94ba416aa977c5bac5b19def1a59f1e9182564b1b8d4
      c761d30c598415ca200f30c2638d8635e4e8b67df03e207c2dcb2048e01590f5
      da7fff8c5d6657c32f5c2cc5e6b807e647a50b252817c9063bc542282cc1fb6f
      400b2382e7b39407c5234b6ea2319828348dd1a8b92f506f67eb686726138781
      337573b6ae878133b7c8548c307656c817f529d8f068f031c70b044ce1a09d3f
      8c8caec215dc3a68ad805617d11aff61c9a2d1632b4b7fdb8b67f37a2814e997
      4490b307b3ad3ccc9fbd3c577d9c147cbb69ea55c604f67895e2921f8b75d3b7
      1e7126032acac6d2e5cbdad32587b6a99f9b12df949822e6392394a9761cc1be
      d0155bf28338e50c8cfaa1f0115f4c5384f6e8c46885588fc79cff4430fe745d
      4b74c1bf85cde60236e3b0b87dabac96677ca6c0cb7372bcf39708d5c1aff382
      35829b67d6d51eaaf36bcfc4c82980ca024a0495d8c3fd5a8ada25a3f7b33e78
      fb86701b710fd0b39f4b9b5649a654d719e5a96d63ca306e3862ccb52937a3bc
      1cf8079a996a27ba34bd9c54cc9b99fd504f758abb3ca519c6521095b8964c47
      8063a2a5e668c88eac1feda35ae0865b1cd83bc7d1513bb21188b7c81d71cac1
      048756680fe15493c79c5b3de8563698cc900a30833793a46a7237623cb70b15
      1024855c69ac2124ce426c8375a0874c6718b554875608935124a90357c277a6
      c4bc487266066bb0d7a7e76b5d3142a6c2aa8ce6da7540794eceb9329da1244e
      8b9fbfa0303ea9511d9c9a5ce39bd3c6358e4914d5a96a1c6bb47e7916b2c711
      4078c003d939e4a22118c7626d995b5455c6cb07ad59275e024944d599c81764
      8ad0852625525a34fc1343325ebd286cfd2bcfd856cea2078415c49e485abb3b
      f8bbde7a93bcdb0a8ab84f4712370f71bc1f80c89fb9c548613ae9b267ade1c5
      0915c3b6d9a464a6387ce71e2f268bae278e264acdc8f8ced1d85047aa2ee05a
      0c530117e1e06ff75624eae953938a7bac13698bfc0139eb930ff799bad7abab
      d85b74babcd6d05212b55db227339694cb72258bc365860d56bae2e21c5c8862
      86e9a10f747d9345b9ba25cc741a742dbc1dd1193eea58ab08496f1a8bac7520
      c5ad109ff3b8380f764c0ed84008e54cc56c96a32187f6ba972fab323100b851
      e0586427223b67b4ec32011b33053bd1ab7d515b3ff02cef9c8994411085abc0
      7d4b43c16147f15877703598d5626a85e56e665724d4f62c07590c5354109d30
      b46f6b5764fcb45e2630d18b6bc1d767e814ccb215cce3861600d1b17be16cb1
      e05b26577ef53c7f1a0c4ea15488fdfc52c5808c9c2854fcf1633f977cd9333f
      b97933a9624bfee00872dcaace051c189551a45963d9f20eed23bbcedb37e9b2
      9039a294a299795cf416e8990d76f73af6474d157107afe0ac5cbb16a1241fc0
      13a7350011b4ba70d9ac50c644b479f23e81ac986bacbd462b980f7a17c8426d
      d16a8a1f6289221255a8437a1280bd06b4c8a8f1b566c13a5841abc6aab41426
      4932ba7d56f94e8970570d8586ff6c7754822c0a0c21cd2b190a8a3ce6294346
      a430757b40361833628b603a9c331165c8c7c55a45ab8b57118c885c93eed7b7
      fc8736ddd0a10f8a0d1d4b1d3f4bb41b09c67269493b03ae004917a625c4ccd0
      64a21a822d45afb4d30b64a888460c37b1fc23082213cf468b10c60280ba9c91
      d68cab57433ab6ccb7474f0c0074ce23ac09e28e7795c72f496581878a999097
      fe940582b4af1784267bab2af681119dd58ab35ca006c04e7345091cd489a0e4
      c42ad1cdd300bc13b395ee3121a9276ca01b6c2382212872729f9b9d10f2a777
      8085a22966f44601c72524b8b168e368cb83466f06746c0df330bcfc7019456a
      9740802cf6923b508a3326cb53265a4a3b961077884e38c073d29de9c8118941
      0467ac6c46f7c38e5142528a945ad9a510115122f519ca937e84e075260a323d
      900bb5e321080c264a95543106481cecc0d48275ebdbb4bdb6b5a9794a42d94b
      fc5c644fc8a5f3b7bbef1b3ba09a48473b3d2933b61cb474d292764531821fb7
      2a0eb72de454577a126ecd4778722c3c55e3b09d860a0941189e680847112b75
      9963a1862612ab7236883d177067ae105d6db70d5aa86aa243004121baae8388
      30b87c6ec203168987cbe6a9bf8765bc7ec4a51ca64cd7b22cd5a3877dfecc3c
skRm: 73a9ffe155d39edcc023b11171ad6cf541ff85eff68c33b521ba25cbb1b7079b
      f848b63f5b8ca53f809255b51f1bef24b342d706a77cb460981e16b2ce737552
enc: a9a4421ea715fc52329204452922e20220e14c1488bdc5f5b9e33916ff8c4b464
     81b8cad2a8b383f06b629908c71f7f7816afdb03c0a3e97fb58bcddad60cadd46
     582c182e4c75c69283f5797efae3b0ba5d0957a8ee460828c53b925d836a1616e
     564e0c2df7342400fe16a2efd0d441764328be60229f172d3244102345367ace6
     97c8332e931b32adbd47ed63854336a5eeb3128a4b555568dfe926206f93c5228
     5fc036e26a5d55e1e40939f8504877e0eaf2744549e4c6fcc4bf8e85458dc6629
     4699fb146d0be363b03444ee85cdf57cc373d463097b8015121f91c00b66fd805
     d32ff0fb09a5c8c5af225f3c7c4d7fb7c4a39cf75878b16d3107edcd80ad10a45
     0b1035b4144f3d662486b9e05f46f001ff8bf98688ceb4987bb0cdd75f58e1844
     19c80ef55bc4ec0295fb290119af95d95ba24c0e2d0c371af7ad7a6e4a34b635d
     bcb2961571eb64e8087b8a2c16b2a2a4f71e94129bbd11bb4a2678dcafbd23bb6
     add7a3473880773f9b92812637b672edd418fb2630fe94d481789657d90afa4ce
     b7617ce2732eaba2c6a019b03ab7976e886ef9b50affc46676e536575b46dd39f
     a95e1f6d242914fde952e07c789a6c41b0c53fa3423173bbaeba6b578c1ef84d5
     a49a044c69aa6cdba1a7c1b373f31ca39216c8713469b1f37ac6436f4ec3e2021
     76f767416b45421eee5c9603b26be09ddcceadc052bbc71f5f32867627523772b
     e84e62878bf6882b5b3c863e0a79c89a2efb0744ce880ebe3f5c729baec24ca2c
     6541cc79f6e32a8163386a99c527233cfe88521467c6c2dd786f4957834b4b247
     29235853622579ddb427929676b8e338de6e08b512c3b26bab191a3d7ea2f97f6
     b5c56d5d92df4e922fbfbe16c748b30ff1d2816d7d8431b79ae3432a9f8d09e9e
     2577c1c3cf987cfaa17d699716892d4cbd8d5cb4fed656d58e1b3f5acdc6cac8a
     fd31dc50bdfc8260c379b6479df9770fe752a9c1a34c5da2671fec505d2da1dcf
     d3f2231d20a812908e73709d144717ba761ce5e200b65af01ac5fb13e86ccc72c
     debbac15e0f45ffba10120b844b5c4619ef546d5b493bdbe4c90947bbd3023126
     c099cc6c5a916a46cef0ba465c4d4734f2d0a4504ecc33f674d3e2560d2df0f20
     1acad2988e454be3247aade5b5d7a2ca3059e75f1b09cb3653aed9139281aa66b
     21ad3ff8d8c4f331b253078c70173d907e41140307b495cdd83de81b12ada65c4
     41a50d834c32ed661a1686f2bbc57736b2b859302b545fb2c4214b5cc9b5b85e5
     6c65ae02a1b15e561670019d477639773026e3d233578f6a61e721cbb60c17a0d
     4035704b6dceb65c3e4e28772fd94df756b6a50931224e6d70f51993031fa9677
     0b1d9df23b6fe1e0b6707e08a95f40357140287586b18f2cebc36544b90a82f08
     6474fd1728f7d102e9f448f27fc632ec1805e0afe41061ac0501e91b5711e0431
     a856490ef6b2ce206d51d40dfcb2c6320aabf4904b9a58220b70bcc99b6a990a5
     6398560dd0bb78aa84bf45e43e0ee4b3e03c5ab31608ead929df2e9fff6a4ff9e
     9f863592c471ab12d944ed3eb4ea10d80efc7ca22294b54bccc059f04170bdbd6
     d0a74f2366c0d26b97f0c508b3bbb913ce024b1bd3a5c6ec5f0643d2cab3cf780
     55334bd67e065564830a42c75590bdb5484fe758902ab79192255c250567b761b
     ec6c6605fccaf50aec508103ea028065c34a799b208654a4b5260a4ff2ba8100c
     39ee128eef57ffbe36e009e530fcf215176184f956d875eca94390fa1b3b264d4
     ce4d1dc0bc042596e4da23073a4a6fa4bcd2d95380ceca4b4411a5d3726f3e41e
     5c8c0792ca5b378414e3044df8fe7074245a610c59c8a741a110a54807d172504
     ba9a0c078a88c33f610f7ac28e6ca0399fa8dd0a11c4c3bedf6ac81172dd7f6ee
     5dc6aeb9aaba4f48e0ffd604df818f06c09734a546f69661e9d0d544c7e4477dd
     644aa6ba9a243e5f6c941405a83216b2cb76e1e58cfc7566bafb11de4025cc40b
     7c24e0439c6ed791bc794b996e7f0473da9a542ff4aa68c14f224400588b6e433
     7db6a78558a89ac54f93d2cc076fd15547f1f7618d738c63217e7453d861a7141
     019f75cd7ec5a6c0c8b690290ea3d2b61d142cd4803a3cd36b3b0d0b4ba545a45
     4e23c14c723e7f21bc1e9d2b571ecdcd21a463a8a793e3013e211a404d414070a
     1aa635c35e8c8b87
shared_secret: ef4fb9e654c1f7cfe66da7f2d0ed39429067dfdf3b65723ae941221
               177f55552
key: 85147d20f1ff72eb9a5d3de9a3c920ab0cac7b00300e6b07a7f53b87ef07e1b0
base_nonce: 75437389e6da148fdcaa309d
exporter_secret: 2bb8e6404f0df42e403505b7888d04bcdccf4cc33a93d90cdcde8
                 b3604b5278a38aa272e5ae8aa4a0a8ed96eb4ee86f7
A.3.1.1. Encryptions 
sequence number: 0
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d30
nonce: 75437389e6da148fdcaa309d
ct: 9d16979cb9ac997886c0ec51ed2c049d7ec53b369467026157ef061af23695b996
    e1893afd2173c310546859e82eea9c16e0a1363bc994f2ff708e5d60089c1b233f
    38ce6a7fbd176744

sequence number: 1
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d31
nonce: 75437389e6da148fdcaa309c
ct: 36ac3e4d4b5709eb863f6cd257f046b2f36077a010952a9e2811494adc95667674
    880e672d9cf1fa4e9e55245d22ca553c86a60cce2714108ba52865dc4addd1025c
    69b3206598f78903

sequence number: 2
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d32
nonce: 75437389e6da148fdcaa309f
ct: 4e9c9424c210f9cc0d2dd090bb44a022de0b52d3e475d6c4371104f2da02e4a5bc
    40e993d71f13e36d0b94a730e62198bd73195d688e68ca37dc4fc1cf6f0796e701
    ca7752204ba806be

sequence number: 3
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d33
nonce: 75437389e6da148fdcaa309e
ct: 964fe9897fa61af5c81ed419d80bb861bc6a341e2b1eb727ed5a6ec7fb7be588e2
    b631d96228a8c6a56377a26052fe519dfd722201fde9575d81a78b421412fb94d5
    cbdaa02c9db36ea3

sequence number: 4
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d34
nonce: 75437389e6da148fdcaa3099
ct: 2eee98e32839053d1802c803883f7e75348c0a12751a93614ab5391e6f0d727dae
    9ad2727cfe4687039e7dcd090eeae23f423e8a39916dad79d4e9b2cc090230e30d
    fa0d7f86ed2ac4ab

sequence number: 5
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d35
nonce: 75437389e6da148fdcaa3098
ct: fb737341024d2cfdf2ae4bb789101dcd4e5fdb66ba19409c2af8e76e58fd3478d9
    5125b1ecbc03e7ae98c160fa5882920145b0fc74435ad043892e7b6b633bbd6758
    b15ef96ff66b29b4

sequence number: 6
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d36
nonce: 75437389e6da148fdcaa309b
ct: e7f74979e287070650606025e78fd944f43f8f0396d3532a83ff08e16c214c5739
    8b2500699e0642482d0eb312d372d621a41fa80cfcd1eb79083cfd5d426c76ef92
    452968b2e03e095a

sequence number: 7
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d37
nonce: 75437389e6da148fdcaa309a
ct: 732c8ef9e28903958588d5b92504dcf62f2c6586269f5deb478c3a2385dffcfcb9
    e9ec5a4d64dcb36b902474799ea10639e404b895c6d4e8d1349f37642f3cee2338
    cf6cc7b488c6ec67

sequence number: 8
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d38
nonce: 75437389e6da148fdcaa3095
ct: 437ab31d47ec074810331f8fd220e5b2d0fdff12c74747234ea970ce33e92076bb
    f966abbea347b4db373e4b2d88f76384c707f44abf65154575cbb012dd337c63b6
    8b7bc986dc1f5428

sequence number: 9
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d39
nonce: 75437389e6da148fdcaa3094
ct: 12125f1404895b4ac7f2043071b3e62f354f0306aeb2fb604da6385f5d6b44401d
    3bbaf55284843b7b3b57049c830826d15121984f11655d6f1807ed1b18e68483b7
    95e254d0174824b4
A.3.1.2. Exported Values 
exporter_context: 70736575646f72616e646f6d30
L: 32
exported_value: 5bfa8896ed24e61987426ef9c223994f5ea8088f25f6cd46bfed44
                18a358c352

exporter_context: 70736575646f72616e646f6d31
L: 32
exported_value: b9074bc3442b61a9d528f26685d741a37b7fae652c726a69f2f4a8
                d75c2dbfcb

exporter_context: 70736575646f72616e646f6d32
L: 32
exported_value: c324cc1566312c5ed6d24d96a6c318efcf735828dacd615a2bcfb1
                a287d4f6d2

exporter_context: 70736575646f72616e646f6d33
L: 32
exported_value: d5678af261a32206a4171563145aee2b1ff2265a4ca02c2d736c57
                5872eaee64

exporter_context: 70736575646f72616e646f6d34
L: 32
exported_value: e73be02bb01d7c3ac63ef11e04bda6e3d6a7de507f89574f803236
                c8c954dc3f

A.4. MLKEM768-P256, HKDF-SHA256, AES-128-GCM

A.4.1. Base Setup Information 

mode: 0
kem_id: 80
kdf_id: 1
aead_id: 1
info: 3466363436353230366636653230363132303437373236353633363936313665
      3230353537323665
ikmE: 60bb82b558667cd90fdaa6dad511b68ecc36c74aaba659838978c2f1f6e9194f
      e391cdcd5aaf218bd2132ee45652de419faeff24b210dcdefd78db2f4d80757d
      c026148067910f470240b079c36f31463f43a33962585e1a84f6230384071be6
      9eac96ecf1ff4b4b4be510631406690c62c037d7ab2623ae4980c5885284d8b6
      10e446eb79b5b6ecbc914ed3b924db036e8604569bec37093231d13bf31eb9df
ikmR: 3bf888035cc5f48fa476c2ccdb73a5482e97a0d0578fa710b1e393ca9716b6f0
pkRm: 67a132b24aba43d90a9ff65c02cc8446ca3131b7496348359647bc145b52f6db
      1253414e12515a17978a2437753fc754faf312ffea54d6c304f723989681037d
      fb24b6e89dd72c095b5a2583e8656209845d1241876c4f98093d19d3ca36b8cc
      def92471dacb96066dcec17503890456002bc43c60129cc9be2796e74ccb8cfc
      ae45963cdb60890cf35ee6fb51b65c29e1461c89c849f8e3a7ca7a32b3e0318e
      c8381443950b386200c645fcb5065c0cae32871c18f4b0a587895a78bb7139ad
      14b238f34306d367b4e8590d1fc40ef30a30993b34b7c380c541653fb6b8f060
      cfabc149a3440ad61ac4248b162df284dfb9433e623435d64972d9c409f37f4a
      d28ec20161ddf43ee9d61ac754747f8a0201cb6ed9657b87071e843b78954158
      1db891c8aa60bdf8965582a970300af8cc2a148630216b75d31ab5e3faa5ed5a
      38ec5c6c459812fbf2412afb96b9095aca552b2572430edb97dbc967ee142df0
      d0b83da744891a50760326eab584c1859fc42810d7c879fc67b78827313dc01b
      2a374e0442ca8f20249617b9d5042b2ee140a3c93e73072e9a1163b3d6432304
      66e66871a8b42bc032475259037188c8939660994c900d99011cc83a308a6539
      0827ed8bb5ec85b4b8226e44104b78c09d3b69bc2741cc579244b9763427809c
      dbd5aa8e838ffe3762eb0a9e23f2c3b25340c799c503609b50313c9f183a04a8
      01ff1b883eb397d370a6c4b05d8f2cc549c40563d16bb01296c7c4afe1763422
      6c95eba58a0af16d0d589a7a0c68ed887d36c98c8b75819a4674a79553f97639
      e194aa735b04e157127b251658965f141c7319990ebac3cb675a43f2554fdaaa
      211fd5037938935915c46a01cd0480a9bc624d2555b947d795e142608de987c7
      c8ae255ab71cb61f0ed7cd0ac88caca1a7b597a2800b15a61222c5f168315985
      e26378381168a885aa774a6151c065b8047bbf5aa9f3115f55343577782e7512
      1c5d1bc59f4caeb180b5fd1c8811b967db91a5f8a1052adc0eb9941f51328fe6
      a9608c4bcad74a5168b23475ca1d4be73f99ea59d209bba4a747f589a054ca28
      54b22924b6bfc07b0a193a7883b2ab62248a0833800bac1759129dc465836fd6
      5721cc08beca917807a3b0e29b0a8192a0a96fc4597177e6779f005be566705a
      8a2daea40c8cb74b89030600466bbb62232c1a4fb0073257e9c8a518370d97c3
      7448989ce9ce08844cd5114b2db0906892cfac404ed54288796670e2516e9384
      ccb8aa5bd368bf7425241306082c59bc99942dd8144acf42904cbbb771162807
      ea07bd53c99ef876398c551a08488b82446ec13ffa257d47f59a96449f1962ba
      964c48f47130e0dc141b21102a5b003e31945b513b88a887cea21a6f9ab3ca96
      6254db342ad1a5cfc9071c0013f32aa2bcf0b1fb15a22b629f138720394c87b8
      2c779ad5221df26b459a7c8a573743901308066366e370f0480ffbe4a8db2342
      88c1376341aebb98bc9bd1c9c8a702f42c99011c22ce33006752167a4c2aa964
      9d6661b1ba30485eb35edb34a5f2c82045944a7dc85c6fc8b1f7f28e6c1a6b29
      1591a6d9b9aae515dfb5277fa12d703a1481f44a88d760e6953150c67eb91543
      62d41aefbbbc2605ff478661dace2516aac53b17ef86e2022546b810d4b22aa2
      048b134f6b4783ce04cb9f5a67cfe41303954ee05abeab8aab18d97a790e6085
      1fb2f11ab388694528ee86713e8fb3a79c3cdf4852f11c95fe359a2a94af5a55
      e9
skRm: 1f25a59a6b22ef57b8e48a6cfe739b9ec13e9cf57e82dfd6e0480e0324cf905b
enc: 19c8a22f31dcc098ed9a445222584c04c4254c8f87abdc0bc3a308a7c360fe50d
     133f394f48576f149cc272ea74cc07584186d36237e576ec55fbb49dbf1ec3164
     ae36675a815460039e17dbffef0ccc733bd554ff7b97fc9db1a98eeb1fdc503ec
     014ab4cc2d88ac9e1c53ef8796975908365d591dcc16aac61d37d803f53cadcb5
     005e7730cfa6849a4aab01e07044f69d29ccfe9966cee08b725537b5aad4b1a1e
     9d29b5061c32aabe077a5161e9a57fb1e8dc024be5f5e8cbed1f1ccfea1d34e30
     2281c325f9b4ee87ad9095295be6d211a19d0f77e9e21ebe1f3ee032759d1a3b8
     a9589ba340512a0d4b61e112a1c291e0864fec755744b5b3a659920f82971470d
     f89b25283ff19acdbf8ba9b087dc119f7d34f175cb1727bc4539abb277e826805
     18c6ae1102f5c90bd0f17055b5f21c65be157740daf76d533fa9afe28250a3fe3
     2a767514375f09df494e1d8507a79a7ce4d8d83aaf8addab70feb64a5f1c565b3
     320bc1ad7171115a050b6b0be8db0447c351e25443f8870c552d074a00b02e03e
     81ef21f3b7b117ea44675f13c9cf9aa60f5a0941930094bf2787f46c65d314d19
     d722e10104899bc732d7025174826774e5f355405b2175013b5d0ab4adb980e77
     6cbed35c93d26623ec08bc74a6229c6eb6e476ecf6e31800644589ccbbca7d8c4
     6b138997144d5205e75237df59a0dc901ef3a3b4d3e45616da4761bfcbb7e38dc
     e47ac631849702f66348090ea5a2ebe8e022939f8a108b0f6d89c71aedca58b1b
     f98b61467fe8862296f1a407dbe11c526b53b175781454563670ec9b7c3b4c062
     c1af74b6c9f38197b0633e6fb304347b1b31b3110ad463ced8fe2350924f0d49d
     4cbad080bb4d440270482f5f9985ad16bd8b350fc6f2c6d9d4f1cb57104354190
     1d6aa1f30c0a8595d663a44438f460ab5cdf6504f06927ea71cb35f76a97c7320
     71e234578560566c7d572393d33fb9e6e3401f6006a7cda5b33750465bd0e070b
     97f55ed540e884f597d3289fc21ed1928c869e263b82cda3cb3a7f06bd28ffad3
     d71b0a21b8626e0f82223860642566959e3593f168cf623d78318986324691010
     6450415818240f8c047ea86455ee8710c574296f8b698586cb2a067a6bfbbdb5f
     072483d26c082b96d0a39ddc71cf424a1907d69a1913f81d6c7dfeec1bb7d58d0
     43beb7ad1429a97f9745f8ed207a2e30ddb29ca96561f0699cf3626cb47138667
     4ca21a5a33b009da7fc0152383977bc7169b406571d3118c47fd6fe3224affbc1
     b8f118deb08e8b761633d96db58054b8fc5e2035c516a74645c323362f8141edd
     50be3fa21f894483d4597cc046cd3de11b1c0fb2cb8eb0021dad74d404ec952c7
     1ece3f50101b54678883402ee0c3c5533262a66cd1d0784b3fc7dabb28c29d347
     194521fab5214455117f3f6d40215bfd901a34411a8985ae2fa74b75d61b3d903
     7a54994622be15ca1bb24a03f6a9464b32d094e78087e69b380dfd1dc137a1089
     61ec564a28d4f083b249c8004310bfc04fa6fa72b58b173345901cae4b54ff086
     0016232a46bc55d622880aa8a25216c58793cf2c94a1df461b758d43784e9c9cb
     8e67928b5c81a78903643508659e6ee
shared_secret: 556ec9c8df352a315ec7fa6d72848b7f277a5f7181169a107d97b44
               4d7bfa6ce
key: e1f50f15239d8c3cbd3fe992913bd365
base_nonce: 109dad0a50896f30a4cb478c
exporter_secret: 3dc613f4c647d912c18ffc90bc95025efa214264f6c1741587d04
                 4cb5a1f3e26
A.4.1.1. Encryptions 
sequence number: 0
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d30
nonce: 109dad0a50896f30a4cb478c
ct: c55b375ecf13081a2448aefca58ca81ba771e04bc7299f9152aded351c76ac05cd
    c985a1609335f1399855f528adb21f48dfcc841fd7ef1c38bc64d9bdcd9c18c68d
    6d7a6c247429677d

sequence number: 1
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d31
nonce: 109dad0a50896f30a4cb478d
ct: d3ef453d4ae5192c86d339c1f3ddd5e487c1553018da29de16e08b82bb4c0b82f6
    06118ae9e11967d1cf572f27f64c4c29cdb4c70bee123664981a62169a3ed664f5
    0229e8ec7726d1d9

sequence number: 2
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d32
nonce: 109dad0a50896f30a4cb478e
ct: fec739822bc47a13b041e2e45720a5401b084bced934678f462fcd47c0494f1f5b
    acf0cd3417fb208e80b3ca1c5946000f84dd359434dcda5efc36bcc3a3872e569a
    95149ae749273e27

sequence number: 3
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d33
nonce: 109dad0a50896f30a4cb478f
ct: 682c9e5c34e9e5da25e470e5d6d9952f9316e919f499724625e6155e7b81526823
    24d09f217e9242df1e0c7502847962c91f55be2657a0183cf35cb4b48ac6cbfeb4
    218a15145b924fb2

sequence number: 4
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d34
nonce: 109dad0a50896f30a4cb4788
ct: d0877d09ee420d5e51d9323c6d774733711377f2ebe2495878fef4f342f2f84bd9
    31e279fcc9b37ef85d7c721363a8eabbf7b223114bc99abfc79a41a6a4b9292158
    57de2f3615f1e05d

sequence number: 5
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d35
nonce: 109dad0a50896f30a4cb4789
ct: c82e8b47990d370b5241dce51efbc2ffd5dcd34f5efeef1174b85c025fdc1133d6
    73fe3d13bc54f68706f276560df8799dc6513af3cdb5c8bc41489449f9eba46dac
    ef38fcca9a1644e5

sequence number: 6
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d36
nonce: 109dad0a50896f30a4cb478a
ct: 7b732cdb3cc76ca747fba1f4f51b194b6b62c16520fab04787d436bbffedbf8223
    db99cf4fbc57ce1023d2a3d7a2377285b42228568267d1a25005a3a1021f733757
    91345505d56aa87b

sequence number: 7
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d37
nonce: 109dad0a50896f30a4cb478b
ct: 2e95a888e434c5b820e6ff45492413eebf8912520c1ed53ddb04717ee6f2bd1efe
    f1adeffe1bc557eb7d425cbf6fa5ce1fdda9e801727ccca601ad36e3f1b3926443
    c7501b886f1ca798

sequence number: 8
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d38
nonce: 109dad0a50896f30a4cb4784
ct: d2c225d784967a0faa7f27199d185c34965313736f2ae14e5ff93838b10615aec9
    4f5483f7505c3d56b13ff19708b4bb55aa62ea78e78d63b405606d7c04420c567e
    fb5399c71b65d4f0

sequence number: 9
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d39
nonce: 109dad0a50896f30a4cb4785
ct: eb2ce0435207a409d8016fab396018c3fbbbed318850546be045f2bf81eac4c393
    8ad9820117440a8ab9cfacea7fa3d0b7e5bb5c760153c99a90c6f24cd25dac1b94
    b823d2c6e8780528
A.4.1.2. Exported Values 
exporter_context: 70736575646f72616e646f6d30
L: 32
exported_value: a7e801ca7724275eea77f2e95340b7140b98aaa9f0035daa0be6d3
                325db4128f

exporter_context: 70736575646f72616e646f6d31
L: 32
exported_value: 4b6193c46d11cb047153e27e9cb43aa8ac1c107da4678ed3852ba8
                415ee3ff53

exporter_context: 70736575646f72616e646f6d32
L: 32
exported_value: 0f1490b86f762d3f7444072ea2cf5cf1641913950a6d81e4312af8
                23b552d3c5

exporter_context: 70736575646f72616e646f6d33
L: 32
exported_value: 9d4620b1373bda21983457c5e2a00b5e3b99beced43a5b6cf434aa
                9c2ee66862

exporter_context: 70736575646f72616e646f6d34
L: 32
exported_value: dc1febb6ef028d0ab03ea77a197f28a5b9e07c2e2808d4c29152c8
                3e70bfe9df

A.5. MLKEM768-X25519, HKDF-SHA256, ChaCha20Poly1305

A.5.1. Base Setup Information 

mode: 0
kem_id: 25722
kdf_id: 1
aead_id: 3
info: 3466363436353230366636653230363132303437373236353633363936313665
      3230353537323665
ikmE: c82228383c9fb887f7d8b332c28262024eda5b6b0ecd2325fe662daffc0594fa
      d4990e7c8d13812137d06ba7017453de675ab0388d418853617f3ca58cc5daf3
ikmR: c8575d137deab99ac98fb0873048c83c3a1f47ef5b409f609c0ca652f58c83e0
pkRm: d3d102410970b8bab2984008669914490c95dea2c2ae331ca229aaf3609a6d5a
      cbd60a9ecdd71cd462c08300c474e318b554675679b6d4e1bb1a76269a7a87e6
      8335ba54593239290f35b65e5aa0d3352933339336e83260125e10ac21c97b40
      cff8385a18b2b7d62436377a13b00c27d22fea4176ff76ab80970ff0e26101c2
      45b7c33dcaa420da8ab4df41b88985c6f3845e5a5364e7d7a74ae764c175bd46
      2017cbbc5f684a7e4494391d050b83ba9ba66347774c707658c5cfe481a8c20e
      fc670314d7569a4793625abfd6579435b31886f80924c88c9a4011a0c58b6fe8
      5c5330ca27aa80ffcc58d3ac6a759897b44893bf8b520802b4d7d56bc24976ba
      32c070f0cc7fd88c19e958de0b8fe93a7669b5bb8cf80a88e6aa827924cb1659
      fe6177023611ddd30eb913ad8b2c08fc8209bb9719c61450518881ca5b12b8c7
      3ba3c27824773b5ec6571df41b277555d9aa8f566444614a8473d3b1a5e997af
      066ae1f355338302952281c82ba94f50a22e9ba55a56193d1a3f4b5365f7eb2c
      a81cb4573c33d1d9861cac8d4cf327c0393ab0c0b02572bbc3821bedb45d4025
      7e1f7643796786fcf50126eb136b35737794168a15643973639f6b6f3dd945d3
      ac6a5ab96e5d4b8fdcc54809053828610ee3a56bf4c84447147a9ca5745d5c05
      e3d9cfa659bb4c4c8f2e006826c27633a120c32151deaa2a98bc9578232b5186
      04a5186fc7ac6a1e594b09106418eb1aa1ec6b44fabeae5105d75531b9279b07
      f6277ab297a5ea77d2383154bcb9db8a08fbb10522987d63c99958a774160333
      f5f208567a311464b59ebb8cc8375a1f02470de68bad55c8e5184c8c4a0dcd45
      bfb59995f4c48ecf947896126830818aca48c0749c057b6591d381922d8bb593
      e09d4bb7b6b046179c16a1d6b4149fb1cee31b6b9a015cca526cfac8bf060c69
      9e751c9456c26d832d58926032bb78ffa44d0d024f7a417e1b452f1f779d49c8
      6e0784ab97686acb025c90f9893cc13bfc9186f0e9946ba498eb15a6684828bc
      0ca91482ce91dc4c12d0ce4b936e2556aebdc48cede6adcc066e78895086b493
      16725d9a0987ca75a7e00b0bbe909397389fead7a8ff73bf94bb4272b27b9354
      bdbf3777a978024d074a45077ed0435b8b845e4481139b39ad1276973fd1cd8b
      1cc6e27b16998a7d6295c98347998d6669b15270dba7c098f16136015bd3b1c5
      897b1312f230e49bc07476cf4deb5bf0c971d5ac37f980283940c4e52999c549
      aed09681a7f350f5a1bb1dd5a3b8837a22d506eb2029146817ec955d9dbc2939
      514ecf468c4eeb85198230effac612fb73348b42bcb9b27d9816a16596fb3618
      e71bcc321a4523a66ca248ac032c06b9e24cb084c59bc489868639ae7533f8f0
      3a4eeb56f8a3568f687f38f83fbe163673eb76275b79d7f32a9109c30eaa96a0
      f622503c0337801fd9b2007603ce73c0378b250c35b634b6c8ac2cec1fbb2456
      1a7a7812e77b4844bf9c6a299b409303c85199ca5dc6eac4e4f85ff10a464d96
      c71382760af67fdf006c4eb6b627861d5bf1978588c02825ac70206274742af0
      5a0dd136c2d465ac90b4293d05381d5911dcf48a878a6cf8d971d62c14700867
      e91dd050f85d68c32e227e5be68d3de029608179f6f83b95e5deb6263fc01c80
      641763ebe08e7add5686b0ed1d1e7053982aa616130939d0a09462df7dc74d05
skRm: b6bfa0299b955e85224df2e468f29eeab377ff3b96d4462b39447a22d32b91be
enc: ab354dd589f74ee0eab7718a630cbec5df1d09058e177cd6dd141d883450ddd70
     c050d88bed3d07cce23415cab411108cc30906482a71adcb134a56e978a6152a8
     e063b24acd1534f264f10458152a9ed4f1f32b3d480c4f2453b7fdea7720146b3
     ee92cf8a13a4840076f68c911c65fa3db5053fb0aabf79e64cd5e7aa71b2b9641
     e713ec7df552e17d5020f8721ee449b42c888e2a3f87cfd96e3a98c3e7c4cd8f6
     47f899570f596bf17d2b6fa2cad19706d9cc3cf09493e1c7ffa0eb2a4559ae1d9
     40fdbef97bed383e6ccfdb448d9f1a81805166b32c2af2e16878c6dc46ab43323
     ed9c136b925239782e3c329c31a5cf2a80faf025a80766e244605c27afe4b624d
     9d8ca99b6ef5439ed1ad044b518c434385acd49f1369ded6624a2832a571ccdd7
     0d08b3c04cb1cd3136166f9a485f536f69ec66f0293e840025ccaac42f8e5f7c9
     cb818076c272797047f5e50c1e9f1dab81cfb48fe4c4998b2427f009702b145f3
     4ad8dbc3e7ad4e4023057ba31cd02c4c0545ebf71eb02533e8eaa2b2f2690ee14
     07bf1f66dc5f4d836c45b82f10b720df72d237488a9af1b6dfb4741fd613379c2
     e211e77f7fae6b3734ad81de2d452005334857c4a3cbc82afc7428fe510495969
     b296d24e1a7431f557d48578cf92ae86c0392f0ba73755a9e5465c8e3495e4cd2
     a82d463244341e39414e26c9b242f31d2cf0e46b2aeb11dd5e56ec44834350d15
     1344229e410faff2b2ace5c9b3fa12571db1d28da2c7133492781dac41b7a7e2b
     ac2260fd12f56939033587824c9dfb17d41b3bceea53763193abe0c7c184d5de1
     61ef5312f31fab42478c9a193b868e4d29b2b7624f3ebe740f393d03d843cd532
     7286a579fd2a6e37aca5b64f9316115d612c7781e704ea7d182701c5019975cad
     14fbf4ab3904d4a35acaf0be32d716a1ef5d7188fc418ae9e60744325a3e80016
     55b756df94c24031c3ce32bd90c0ecdac52ca140fdad7f44d04bd0a7e2a726c54
     cf9793f8784a23296f65da3fd1cbc18300d503c5b27be99b9b0e32d20b3614dc8
     a999f30c2779dd7886cfd486dc1c93ebcf517b5210a4359d9fa1805381f0f2261
     ff47de01de555d98bc1a30dda557a83007b61636abaf9041f96890f0f565eefc4
     5859fbcd32d91b203215541227a4fcc3d95be2ddb0702878caa20f2da62c4ff9f
     e33af591ba1ec241fbe2208e0480f8b1cca1679c096f8f5a02a33e9df445b3274
     ac112b43d51510135cd3f532a3379e90bb7f0cb43717e90555bb1a80924cc6957
     7455687cceb9b1610c05839541e87ad83d79ef3ff24ace1934cfbe989691959d9
     3ac48c716b672b370dd4c144ca1e32508707a6ef8aa29b55759b3d054c56bee1b
     aa6f41b84b9fc3fd681a1a1528eac578141529836a29dda1501a49ba245536725
     6d2fe6f74ebb74ef9a49a94a4c6cd1dd09810f0e9bffa69dd8c94d226d0b2977b
     11a35382888961004a44c60fd602e9ff4271287e9240ba96146515b9db9da6037
     5aeeafeac1eeb764faebacd197df27817c35fe4c5c802e43349d7bc95c8b40c00
     1449d3251c1d92ff6d5c3b08c4b27c
shared_secret: e059d39125d1f09a7232413a13ec5cb18a37417675442c962700d59
               da46d105a
key: 100a6260ae1a2660dd575fd4f8bf8ebddda22b8bdb0f1bca9fcb26c0aa12418e
base_nonce: b55542ef5c7fc75d075bbfde
exporter_secret: 2838515658ae0c04e99391c0bad9a45613254bad20f7cdd80a70b
                 25f71fec22d
A.5.1.1. Encryptions 
sequence number: 0
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d30
nonce: b55542ef5c7fc75d075bbfde
ct: a4ab74475a498ed725f685421f67c09a4783fe76f67bd251e1e73db8eb1452dfad
    4df3c6453f7edecc7bb055dde561e2efd54d73a3d4f1f2f02eac90ba1e9b84ded6
    6d43aee6393524db

sequence number: 1
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d31
nonce: b55542ef5c7fc75d075bbfdf
ct: 9a38169c711afe09f0e470779b137ab236a2559faf61d55e417eaf06d48fe62364
    643e95ca68382a281c04c67bd88f311939955a14f5f8c64344e4c103e1d94f3084
    f122671fc7c0cd7e

sequence number: 2
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d32
nonce: b55542ef5c7fc75d075bbfdc
ct: 0f2a23afb6d94feccf5e151cc5cac46e686325dbf34def1394d157448c420376ce
    e6d3c8aa4f3862edcc16fb4c3a9ef8a7ca1054d13fd9b1cfc4a5a47198ffb3b973
    72295c894dded976

sequence number: 3
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d33
nonce: b55542ef5c7fc75d075bbfdd
ct: e5bad2306fccb51b100ce45fba5f88947d7853d66478099011de84bd2a5b9de337
    efdf9c459da7edee76cd07db9b7cddbc9a512fa45ee8f121531660861818ddda7d
    9d2b53d3f257d36a

sequence number: 4
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d34
nonce: b55542ef5c7fc75d075bbfda
ct: 923c933cbdc5955d34bf6134f1ad5e3c36f2acc9d9fb41dd8b4e0eba2101a05ad5
    fe7a895e683176381b9baba7ced24498e87766a14fec8c256c7df2802371a5d29d
    2faf03d9b4bbcaa9

sequence number: 5
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d35
nonce: b55542ef5c7fc75d075bbfdb
ct: 0dd329bc293f83ac756c3fd052c2e52a8082a0a41069764736319127fb222a644f
    6c28155bfab1bd7763d34ab09907ead4f497c9b14d729c75c8bb6f4acfdd596f39
    c2e9872557802821

sequence number: 6
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d36
nonce: b55542ef5c7fc75d075bbfd8
ct: ae092db4f524c459e04a2453c92b59edef2ed07d08138f3582e7cfcb735d23772a
    a223baad29cc2dfe2e6d2935d7c593828413eaabd7eb6cb2b20d6e9fb82ab521d2
    5f80fb93190260cc

sequence number: 7
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d37
nonce: b55542ef5c7fc75d075bbfd9
ct: 299434544769a352047b82f0f74cd7f832dbb47b8b3d8500476f95e07d13502e4b
    748296f19f51c4b35f4c8f80607d087f6e0632e68bad401e4153c95ceb380c9b6e
    1a50477069d68345

sequence number: 8
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d38
nonce: b55542ef5c7fc75d075bbfd6
ct: 6f09ad8f28a51f7f3e34eb99ac25e9b1e4a09ca063babb7c462a7ac7f65310aa2d
    4a1eb3b629fba0606793c10a469af0b2407aac02e6073fa8b070d9aab532a8349f
    884fd97cc5041b2b

sequence number: 9
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d39
nonce: b55542ef5c7fc75d075bbfd7
ct: 90eb1a4fc6e9f6b5cb142d60d905ad221135aab544c8a20484c249d5417bd2eb97
    c655ba8f15feda2adaab1a6bb5c06d0d7b17a6a6d298c9df95681d5ed131d7c703
    918397e302620c6a
A.5.1.2. Exported Values 
exporter_context: 70736575646f72616e646f6d30
L: 32
exported_value: 14b64c194571a8e6fc16cb4d22754c79391081174b6001cd805014
                2f928defbb

exporter_context: 70736575646f72616e646f6d31
L: 32
exported_value: 7152f82449d4cd8137afb9b514fab6791e0938ba7734cb62228b83
                85003f32a6

exporter_context: 70736575646f72616e646f6d32
L: 32
exported_value: e3759bd609d81501bdac23863795a37437e804dd3274f0ed3964f8
                2e8a6f97e5

exporter_context: 70736575646f72616e646f6d33
L: 32
exported_value: 3e9e46c25af47fe02c149de2d3d8300881bb59fdb5b07c6b46d001
                918945cffa

exporter_context: 70736575646f72616e646f6d34
L: 32
exported_value: 0dc9bd0216b18caa75d0188cab85d7fdef4b405c340da75b50e052
                b889fb2f78

A.6. MLKEM1024-P384, HKDF-SHA384, AES-256-GCM

A.6.1. Base Setup Information 

mode: 0
kem_id: 81
kdf_id: 2
aead_id: 2
info: 3466363436353230366636653230363132303437373236353633363936313665
      3230353537323665
ikmE: a2aa5d3e682abee327d4d258e47fdf9b987efc96a15e1f11fd81413206d1ae2a
      b11e0d808cb65a680cf32b00eed796e02d149f3454974db3e1751cf2fc1916e0
      d887c307c18b28645809760d00d6191a
ikmR: 14c036a5e3c4af452baccdcd62cf818f250607076c299636e5c8074b3c757df1
pkRm: dd5407b4430e39f3416a6bc8e7d43b2a72c4f7480b1fd19e0c552af07b8f5bba
      626c2c462724600d3b1598a254fa287661f14d1cf53a08019cb352b7078b2e6d
      a44afb80467bc58c0b016933941a386609b66c8fecb0802ed41559dbb80ea577
      3d3c446f60c103d121049722f7106658422b1a074ccac083e3503a70a259ad15
      358b49b08f7b6502125cae1c18f3e596e4318297b3634e5a57a1275b60499b6f
      e88372520f3ce62e90d36300c7395769227075a796943e9c257e213791a9fba9
      55647167951bab3b8fd1a6baa6fca016ec51d59caed7bc45b77c1417ea1ae266
      2e96d2338cf5a81178071ea127891788511731dd450b60c125f3cb10a847b9e9
      558455608271a3b26ab3a996a697421441e28a4cc410c04b35379c04098f2415
      097481fb1c8a5e25392c56130e948c17d59bc0f01ac9353359ec6d5d19cbbe75
      589033717f797fb967c01877272d4509fb3c8259a13dc7d78eebb51c152bab16
      2b5259f0a36e3c2f8468ac14c279b65929070546f3b572d2b84324943c227011
      c878533629c96a235b4d88b498c0bba890535f00c98c01b620e3c5b293014d23
      00f07b9d6c6a8e4c09c05532b5b4017099d1262f299f7b92663fbb074d115a29
      f7a7d56b366a6cc48c931b19d12cb6ea28487a0c27d0cd5df93349b8c5f8d595
      6196543e429d41f82d734c8dc5281d214c7b7ab32d9dba2c79b0007f229ad1b0
      2e91c3ad1abc8d3ac16a9b951610d5293204522f4b049c77905115418ce571c1
      ac43906799a2898f901105efe93c5acca2fbc72fc61a96a13b6869931009da8b
      2f472914828908d85fd4806fb12a28b254b8f600c9b9a41ada526e41c8719ffa
      71a7638c1ed4b4d86972e6da7442d98a5a9b8c5dd69fa5dc5c76a11f2a439436
      c779b255604f2947205434cd8a155852864d009fc062623f5c89f3c381be153e
      0479b032240e1c762e67d81728993f14431c8b0b3d3bb9103cb0262ef34d02d9
      a3cef9bd25845a392320156784adb54df0691428d7b290827903abaa8fc009c5
      7881a42c09dfa7bd9ec8c3e234b9f107ac00b42964266fd615b25bd906a1c762
      a9f7678b56af6b9598e9db1fd1573f6dd803885b3907a0c4d618a6337b29f37c
      8515509755e74e7364a6b32447cba852aa396ad9863a8d444aa39b519855bd8e
      f40488776c02997033a4a6ac9520d898972b7aa49edc50d4b9143197974b1b3e
      36668bccc0be1754a263ba63ada761aa852717050eec3b36a46835828569c527
      bae503725679654e652520c5369fb0b862174110d5b36cd5c91d78c6d49752ef
      c5c10b8a6dd51ba20dbc384cc20a30308912644090c8726536a35c906a752476
      63798b94a3647de50caea55324825719f99d2b649e7d77be5e242a3227c89f41
      98da3c59e81c5f1b999e5601968ef5b1ca6574b2501c33383fbe92ad8ff5a2ba
      98b60428153b463ff32131c49b6272681dbe2299e8d292a163b903d7911dfc61
      afa104e01433c2ab322b884743d338be8272e11561e51a4d53d371daf430d41c
      997192ac2c27197385cd5a373bfc3ca8d6db042e16076afa6ac31abceea7bff7
      3915c42acb25077405438ba8989ccd44b05d4043f8a3217b05bf899c8651bcc7
      40ba9a678c6b9bc9313bc21a8a38205e079d1051a6bf1071f6a0a38f3a0db88a
      7c9415cd5af72c3dd247bd20b14ea0a1d988816f101e302c9bf3918839e68a4f
      19c621e446940305c0567dbb2c8f6fb0257d09727e164a021b562a1bc2cde1b0
      64dac144ba4f84f14ebee5999db03b2d892d629c134fca1457b851b1891f0554
      37caeba081814b029672b21c9a4283384bc93a8579ca5eb99067d84c0e10c3b5
      bc1d7311829f95458a0b40e52681b1c262112b6c7f374ea86978359c096dfcaf
      af097d520b10c021c2d0e0ab9dd8570d9b3f884448379367caabbbe924478f72
      b0470c7c1ed956fe4b791db29ac9b6b905a8aac1b904fff757fddb27348932a6
      560f4b776c2a74510b11379800b538b27114715273f43f9f7acb63b3addf3019
      66591b963979028449cef3802269c8f94282364546ce91957b509c5f5696cfa4
      9bb1eacae0219c963b802b35986a0b857c0144a9d1cab7d29d851970bda11b2c
      86811023b216d4930ca94f97d80b7b65a0cb7a9ada2b37bde4355c5b65c5ec15
      b1eb61530b04566a4299e91afbef01cc121f19ab90b705b5bf2e57373c16c686
      04a70238ee7c3f7e7d364957e5f4e32fa6747c811fb22b7efde99966fd0da372
      510c6e1fce1b25ce287707e5b3b0a2384e884cc6a3ac281fa6f5705d09ef0a82
      3bfed3af81d8e5a38bb914d2269de2a4e47a1d7cdc6d85cbc009ea787f2eefed
      4b
skRm: 0ba4a1ff718a4444da0016d59f449e28d8abdeac107ee105e5ac0dc1e8219b37
enc: 6252bc46bca0a8fea250a751deef5ebcd053d86881cab58afe159028253fa5bed
     2fb7eca382831b2e9a0714629521466d6092509a0892e93d927d177c9b0ccfe66
     e2fa44f2f1426ce7148cab999bcdae2e3db25ced0d669c078772346cdf7b12fca
     942f5ea27ab175e74b861d1aac098384e848537627d21b64f460e008b8c5a15c6
     811c892d49a053f8a1c06a8b1960b4650a8c7f91ecaf50079e34e2aeb1bb45935
     cd4b578cb7a2578b2cd4215f803a02353d9bc83f096e2982b41e9e089d158b4da
     de7959915d2ae7b66c9ec4aa9f5f85faa62a8d4cedaace187eef5da43ff523b4d
     e139cfb7ee3edda8d2e45af7b591646920836ac97d83067a5f3ccc9bdf6b10958
     b2542a600dd5e27d51d3a3179aa82260b272f3580bd76c19d6c7f9960a04d7219
     7904800a35234b84c50c142e68ddccc5a89dcb94491a1f03981bc1c4d033f48fb
     18b4da14bdfb64b4e2e9985f21d634e3a4a88ca9f2782a2f11c79632e23139b2c
     26d16de006c211f09493a7985e5eac0952a65449ecb84c2d0b7c7ee27c5c12785
     1b9b8061f8f9c64d6e98650bbe7321a2fad69fa6ced8adffdad8f40dbd7122406
     211c09957d37eeab1721200abf815e66b0afa5d2986f66afa9b80bfcd0bbdd6b8
     48a19486f5a2daff4793b54d0a1ab99593977dbf561959919978f21d6b924fc19
     cdd54572b72f1f6fb4f765501b955dc833bf627684f367e0bb02232ef428bd3aa
     a20aaebf36861432f6b1eaa022f5db22566d0065cc78f2059f777ded29c2f7218
     c8995a988fc81af98b9d97551efef39b72b84cab58154c903ff724959d286d815
     9d1a0aee218ede82edb148286f7ff8fc8ec4a8fb48fe912851a3a677f6c27529e
     db36d811402a9e5658aade9e91df8c13765e41aca064b14397613426dfb51f797
     1c29d8d688233a4e3a1e6e1c96e1c1ec39b4d2c0fbc5258e1f363ce11c803183e
     4af52777ec4750dde7d499f4d8e1a69f78af8e3c2e75bb8de85376ab29d7f3da4
     99a8480196258436386151b57252d104a061112721b73ce1f2f5bb0334fd417d8
     8bab0fdac368f46b2db22330adb6cd8e747dc14eff8cef6353c94f9525f6d0c1d
     32ec20b7ec624ad8df4b5e82b72375bee995fad8c9694e765e2c5ff3d97e9cddf
     8848618bf08c7680f1a9f2cef663f81ad95f8aca6855f8aec99157ce975888387
     7326d08d75872a549f524cc5abadc3b007f9ad37072376e97f7c7997b1548dcef
     72ebb751251a1f499c6d79bd4a6ce83331d449aff880e19473fea5ec9387ff984
     f24d56a7dd58426af98203506a7d7e8c00399144e91d9283e4cda4c3d7b7baa58
     bd7b58028101e57ef0410eb6bdf15aaad25949f0e4e3610655197a6b6a6d99411
     09828299c567cb68bd18e2359552959bea6ac6d51c181caf35b0f5fa0a6b075c3
     309bb06ff3bf36c6110241be25bb26b5c36b74059fb0c72a0af36e65e8ea7cd48
     36f79931fa72b0606941a7f1474cab150b90ef2f7bd69b994e128177f387e6963
     dd7d5c15899230163b743cda48777fe95d64d5a61278e2375e77a556e0ee52ef9
     44e36a141123d6d03ba39db4481db40a545aa14b91bb14663d717f93d2db3fbf8
     38c4dfda0ad866b652a1f2dba6becb1f856e1583305447824396bd2c8eb7ad02c
     86c9779aec904e85732141bef525fe5c271ccb655e7dbc5f82327971905e9e8c5
     2bbddac260500a8e7667e2069947da3d62405fa357a0a96a937fd6b6ab9b0fc52
     fec997e63819fb1666db67429fc2971f8aa53ff690877fe1b4c334a82c416822c
     fd06e2eb783e7bc20a76c6596990b12f06e3a597764e2ca85b14f511e63eee821
     338d80451d714dc8fb2f3cc9a5077553f121ae5edc0ac2e37f70e6454bc5bc358
     2b4da9872fddde5a0abc3f981fb5af044a78ec102827bccdca891218faeb27b0c
     cde8fb71f0b32dda854f737dfb7811c386c7d833d3bc81952b83b964dd6146447
     7fb50f86ff5eb5b6f3929928ab7cdec9974cfb97086fdf21ae4fd0d137ccb825d
     45584b5cadaac383abd8d8d7b97229aea44e0985db277fc8c38bc93b520dfb197
     e5a9106c48e903c2120e12a710261db45a17d41342a4053ce23b80fdfd90278dc
     64e0f6dc794d3740b34a28041f00a5b70e3c1dcc6e60944fd1cf6dbad0907c55b
     5501cea7acbce32c02066dab5a7f3bc2c2c237689b0299e18269df7252eab5e54
     3ab03a777faef62f04d1b38e73e0254b09c72a40c7a1e073dc3725a32f5d9de0e
     9de45d907b4cba48c3e078b4dcd78668b3ebd5c67b1682aa5beaed5e02473d713
     ff3181acd63c98fde2f301e53c92b751c7dae053d7914f5c0c4633c0b16377c47
     fe22c64ec4bae84
shared_secret: 226311ca7023793ede9bd9503137298e036add770ea5a6c46efbd17
               e2c1a0855
key: 26143789a8c64c529d174ee0a614460bdefdcb82dfae5eb82821deb7bab61dc8
base_nonce: b0dc993388b766c96e7a8267
exporter_secret: 5b92680d4c918985d6184e85b2696079047c2ecc21c19f58ed7bb
                 bbed68a203720120ce34ae2dc8aac2e992b484f3738
A.6.1.1. Encryptions 
sequence number: 0
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d30
nonce: b0dc993388b766c96e7a8267
ct: 1af5c6176d191f913bb9a39ae6af2c5847d5effca2d794242de5464ef287bfd6d5
    f6735bab1b42b3d29a6b131a91b180b04dbf6afc395bdc35f2b8558db9c62ce54c
    81872b42d222459a

sequence number: 1
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d31
nonce: b0dc993388b766c96e7a8266
ct: 9e34298676cbe51af56ba3dbf356292f35189305f123b59f1fb4825f4d1746d84f
    4440ed957cd610b6aa0208956c9664a8297751377c909160df88bd33908f962593
    333727f83766f42b

sequence number: 2
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d32
nonce: b0dc993388b766c96e7a8265
ct: c2e427b4fc917ad8fa5cc2c2d63802a287be09d75e3c220bdd802a2365d0870430
    58b6bbd64a966d51326646cc58ef6e0e5a4057f2082f305d96d9017482d292b21a
    c25ab2bb500f2c9f

sequence number: 3
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d33
nonce: b0dc993388b766c96e7a8264
ct: 5b2f693bc6bbab8d63cb94945dc02143c07a221481245d29f24d6dbbd44a3a61c9
    80c41a593c1fd48510d58b7cf820421322925d75232504ed20757ba1afeaca228f
    6c6f76c1b8cdac00

sequence number: 4
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d34
nonce: b0dc993388b766c96e7a8263
ct: 306c0c5442f3257c52949676ca71b7eda004815a71dafce837df59826ec8bcb269
    fe7fc394bb508b169143f9770e07a27282fc32a0d4f67c3e5cb4a4fa5aba2165a6
    826148cd71e9abfa

sequence number: 5
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d35
nonce: b0dc993388b766c96e7a8262
ct: 6dc0fcc3e2785e176a8424a268692c1f3ed979b4f916b84a3b8477467bf5061d1a
    79556aec380cbe2ecf5aeabbb7b2b7863a3336c807e9d2df1c7c3673bd4a396bf0
    99b2ac33b39393bf

sequence number: 6
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d36
nonce: b0dc993388b766c96e7a8261
ct: 38c652266fedc8d386d700e5209de8a2043b08ece96885fd07b3c630cdbd1dd422
    877a5ae9b47778b0c90d4dd36c2f6bc9ffc4a2dc734a577c0e11d60b47f8f2cd37
    ace2e6bffb87cb82

sequence number: 7
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d37
nonce: b0dc993388b766c96e7a8260
ct: a22807c89d25b30fd13d869eaddd17846c44c225bc6c941a3f9f4310a5d101fa02
    d3b13c24db96b3744ec7ba7a81efc1daab7a5cdc1aa0ea4d95abf359905c72438a
    4af4fda27a581970

sequence number: 8
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d38
nonce: b0dc993388b766c96e7a826f
ct: 838837f830205843e1b4a5bf12d39ed31a4879af7154694088de2b8223c91fd776
    353f110bdf9d34d9e38c65554e22ce8345b7e4e697d1b9db9a4ffe7e35a0058f06
    2bda1051b008fc13

sequence number: 9
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d39
nonce: b0dc993388b766c96e7a826e
ct: 2353b5655181723109376689bb5683afd959c8ba50fd43abeafff0a1d04943c6a7
    177ead11f09a74acf0fb77353fbd7b893b61fc4dab0b71a944e704ec84199fef1f
    c07bec4ca18fbd70
A.6.1.2. Exported Values 
exporter_context: 70736575646f72616e646f6d30
L: 32
exported_value: 29c8d4342d91ac6b7be5167cd58db0d6f0db21356c4dda73964e0d
                1bcca575fb

exporter_context: 70736575646f72616e646f6d31
L: 32
exported_value: 8218e9f4d94056911a6e0b46446ea36b02f16ed7b8f2d7333a153d
                d7d914c422

exporter_context: 70736575646f72616e646f6d32
L: 32
exported_value: 9470d784dddfa4c994942dbbc6466d7bf557253f1055018a7c0e7c
                11d1f91b19

exporter_context: 70736575646f72616e646f6d33
L: 32
exported_value: d3e89c0a3ae9836c5de623e4470de1cafab694f2fa17ebb144aa2f
                93d9ad7491

exporter_context: 70736575646f72616e646f6d34
L: 32
exported_value: 1909e2bc8d6d98ca41f88f000c0cb0722160a4263cee5e1bd5817f
                276248db54

A.7. DHKEM(P-256, HKDF-SHA256), SHAKE128, AES-128-GCM

A.7.1. Base Setup Information 

mode: 0
kem_id: 16
kdf_id: 16
aead_id: 1
info: 3466363436353230366636653230363132303437373236353633363936313665
      3230353537323665
ikmE: 6695fdcffdc5e0198bb336410fd8a0449c1754bbcdf90c03397996f61477df31
ikmR: baea9ef03113b6b3eae42055d1153824e0d6ce292c7a7776c46164b3d7ff472d
pkRm: 0499c51fe81dd142193be7ebfb9bbead8da7c5014364f07d70b6947003b037a7
      7d1d2ab7664e4456baf9ae18617731c5217ab5ba724df2c6ee06e167d6f8ad34
      30
skRm: 940a1692f2c9bdcc71c563304d019359c08d9cf031c97ff731accace45298abb
enc: 040d6b7d55773a677961fcd20a94a428cce3887a0eadccff4177afae894d13457
     b9a6c6ace3afbcb3a8a7b6dcf341fad4f8c4a46594994765a493123ef00564eb3
shared_secret: aa92abe0c252ce7357b0c3eb6b31f8e5934bcbdcd5d1291dd0ca238
               aa678244f
key: c7a6a81a2a59761aade2149116f463f1
base_nonce: 66429e34404232db6ac64888
exporter_secret: 4603c7eacbc8bc64150037769c56f246b2473dbcc1a73775ddd2e
                 24d0daa19df
A.7.1.1. Encryptions 
sequence number: 0
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d30
nonce: 66429e34404232db6ac64888
ct: b6bbe209cf13d2e491651b4e01a70421cb63f509c4f54b468338ebdc9cbe09e534
    2145c1c367b1ead479b804823ba1ea640df5f9f7bebfeae4cf596f786dc4c80acc
    4ce56e4ef72e53a2

sequence number: 1
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d31
nonce: 66429e34404232db6ac64889
ct: fd31b952b731aad4f43597b0cc6ba2c3a3e56f78abc201b86bed80798c5cb874d1
    4dbac6f33c8700d0a629e1267c76ed6f101b1326c3acdb125c7eb6ead45a3148b8
    6766d2ced80e2da0

sequence number: 2
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d32
nonce: 66429e34404232db6ac6488a
ct: d0c5f0d1fc43c8644600dcfd667d7cbd899c6c68f1862efab6e8fd6f2559b2e486
    a4993a3f83edc83c17c795709ec0192d58593983ba2c47999cee42c78e61c07baf
    68824e9cd83b51a7

sequence number: 3
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d33
nonce: 66429e34404232db6ac6488b
ct: 391f695f38e28c44f74a0f852a2c66b910b5deffcb9fb745f0c70be788d49d1653
    2ddf9242e664cb47e8f4060a0cec5198bd79bf3cfb920a66729774d32039153c86
    90756b0eebb2eab6

sequence number: 4
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d34
nonce: 66429e34404232db6ac6488c
ct: 2b65e00a42302b5de535b58860e3c84b71ee45ec21136a0c016d2308b2191a886c
    3d988fe07a00e7d155a18728816c2acb561c898b13797cb3a484b76a8e9bbcb3bd
    189d6e1029427c8c

sequence number: 5
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d35
nonce: 66429e34404232db6ac6488d
ct: 8676265f0aa3641bb35381c51d49aa1ecbb91e0627d327f44183ca72bed04cd86e
    7d56b633435d32af3a0c4feb39b5a2e180b1aa5571fad5c47e9ae1dcdf63fbdd7a
    48c6457a3be977e5

sequence number: 6
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d36
nonce: 66429e34404232db6ac6488e
ct: 6cea0b9099a85ccd3f10f8ee1ea90dc831dfe8e98a26e06380979130f46694e6da
    badccff3e93f8e77473bf217161b5c2da12d4c11c28657a157a1a6705d5e6af6b2
    7d907cc623d25422

sequence number: 7
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d37
nonce: 66429e34404232db6ac6488f
ct: f5dc80fb97c2e2d59237ef7beafb807d39504918a2fc9e6e35fc7be42ffec4f1ab
    4f4328d70725ad9e660316af5ace8a27589ab8d1fb7fa4758c4c39b1797f4cccf7
    dcc6b521f1548f9f

sequence number: 8
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d38
nonce: 66429e34404232db6ac64880
ct: 5e2bceef6807a069ef9aad584eb22df76ac154cdce7e29d10d9cef375ff665729b
    0b92cf9b1cb60b87edf4c6098528870a19df9300cabc3b2b19ec5cfd269364018d
    76ebd92f675d6de1

sequence number: 9
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d39
nonce: 66429e34404232db6ac64881
ct: 5d407120f1530c82be8bae92db4b1974726f73709570d7067efc1a9e6a34d9fac8
    71edf34f78130b87d92e87e3df592e147dce627d00b489236f3b3adf7dc9c67fd3
    b8a489ea5f926914
A.7.1.2. Exported Values 
exporter_context: 70736575646f72616e646f6d30
L: 32
exported_value: 33367f44b8561d2be9a67535926bc2f52949267b70f4a76d9294c6
                9056196ee5

exporter_context: 70736575646f72616e646f6d31
L: 32
exported_value: 2c07c3d1d68ef711c380700bf019bab6d88616b39060ced822c666
                ad0dd679e9

exporter_context: 70736575646f72616e646f6d32
L: 32
exported_value: 2fadebf4f18368f7d5d270562daa449e31c6c843e87a21451667bd
                fcd016255e

exporter_context: 70736575646f72616e646f6d33
L: 32
exported_value: a0569fb14b7487e35630d680c1dd8db0be672f86d9e77dbff86217
                fddb601a6f

exporter_context: 70736575646f72616e646f6d34
L: 32
exported_value: 45d7f2b32afc6d8f5e1214bbeea6c43c275e0b82edda762171aef9
                f055a42fdd

A.8. DHKEM(P-384, HKDF-SHA384), SHAKE256, AES-256-GCM

A.8.1. Base Setup Information 

mode: 0
kem_id: 17
kdf_id: 17
aead_id: 2
info: 3466363436353230366636653230363132303437373236353633363936313665
      3230353537323665
ikmE: 253bec4623463f09f36b496c419fd8830fa68cc2981e720becde042c865ae9b6
      348d1d2795be4e23d65c19523fb99f21
ikmR: 65fca3ea3b6db29a62bff28ec53c08710fab10b3798e59b678d3224296d5883f
      039123471784ce57b0d85a17cd521196
pkRm: 04a5f53da8564364255bc36850df793672782a5c9e4a7fb5fb2e2146eb12e4d8
      477ab1f326a361dfd1e41212109510e813380547c68c0964c1908f16f67b902a
      061be27b2f8b43f1fab1bf0dbf89f5167ce80aca2c210b8fc0f040699db9ee12
      29
skRm: 679172205e04663f40fda1018cd46c18ebaa876ede6998ba86b051614ca4d5e4
      bfbea34b720617a4b958cc80f6305244
enc: 049f1da943827d165268869c842962c1feba1fb46402fd3fac50c002cf44bb103
     c1aa8fb15a848f9908554624b0eac4573ec258788335421dcbfa625bfc9136cfa
     0e335f0de018e4f9517ae0a8863f1b3631343c49c67fd240213f86af1b235ba4
shared_secret: f609b68f1e65f077d9cca41ad41d45dd66284adfb8341b9ebdd0ff3
               9c90917a1af423d5b70d6a917ebf469e093023850
key: 4c314eaf3ad5fc2c6ec5478d159c566a209c36d22828e8a51e4c84537cfb7c5a
base_nonce: 77459442b645123943d74d7b
exporter_secret: a2c1e1738982407a75c68acffd70d2d63cc3f753ff437947e5633
                 7fd6e612d09a6f776a3628f236c91c2b39c0e30ce70730bcf8379
                 fabac484540eaf89cec1ea
A.8.1.1. Encryptions 
sequence number: 0
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d30
nonce: 77459442b645123943d74d7b
ct: 3c7922016241555d76d87b725f17058f9c309cb3b793b3d8b503cd99a6174130aa
    6fc6792f94345bfd5e8ec4cfc3641bf6a672b5285598e49dab91ebd71c38d703d4
    e41c0c6cd23b8cf7

sequence number: 1
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d31
nonce: 77459442b645123943d74d7a
ct: a1745c52e73ed7c7c05cd4d712094dc5c3ec84d316a82ec0e338b64dd11742f42f
    7b2b391cd0d3397d451ed48c32b5d1b5392db62c6a2c9f829ed9f937ed64452fc5
    e5c108c09899910c

sequence number: 2
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d32
nonce: 77459442b645123943d74d79
ct: a70388a907779a2b59fd6f041541925127745559e2da6b2ab7ac9a49132bb027f1
    918a3ba93c7b01b0028cab840213f8d1c023c57665770db8ea535c8a58b6035f07
    acb658b3b8ae611e

sequence number: 3
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d33
nonce: 77459442b645123943d74d78
ct: 27c29724f99b22905daf2b846ceb4ded9b49a63e21328f361308380f7b089aecd1
    8aae537421cb92d5fa64f7b962bf6b7ad9932769754462f6bc0f62ee21c692da7e
    f6097aac3f6b5b0c

sequence number: 4
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d34
nonce: 77459442b645123943d74d7f
ct: a62b76c581b7b760013333e13403503fe2676ffdc280505aa43bf224a7a4e35b86
    ddcf2d18fabc58aa41c25f2bd3ff0da69ee0064338a220237506d595084a8a700a
    4317d34947f145e1

sequence number: 5
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d35
nonce: 77459442b645123943d74d7e
ct: f90d3dea091e3f1819192e5318095db84825b5b19c1784b457ceaa2316f77f05f1
    336092ddede4067656ef56b047819abf320dbbf82e85e25408ef1f1999b0e268d3
    4a5d5f95bc1ecbcf

sequence number: 6
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d36
nonce: 77459442b645123943d74d7d
ct: 1e2509e24467019a1e4a74c642a6b96b95033560c66792a4fc82e52b6b3e17f707
    2aa0f9dd3492ab04d8ac8fe272f47db3f86e2d4a52f66578f8429ba19c27b318b5
    ec2efb0321770637

sequence number: 7
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d37
nonce: 77459442b645123943d74d7c
ct: a6e026dd67835fa7be9c21babb9489ba9301abdfbfb3723de528bbe96ca50c76e7
    c4e9e7d2aaf4f1b6160033d0f678b2cbfedeee5ed173cf20072638d13a1a58bbd4
    92a0e3c4173aa510

sequence number: 8
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d38
nonce: 77459442b645123943d74d73
ct: eba498069ef7ae26d0d822fa12fc469cc7a4f448ab6b4a20f4eb631f42bfeb9d0e
    1bde4c57089a168c44557d43f48cd49f1581505109426a76d37841c33562865411
    debe44052d5c0c4e

sequence number: 9
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d39
nonce: 77459442b645123943d74d72
ct: c1742c2583409f1a219d733caa07b85009f27c0c195af19679c4f92793570c98cc
    60009e65d5b8c98e2a4d2bf6948c578e7788221b1f9d5a04b3b8b22df01366141d
    b6beb14e2f134d24
A.8.1.2. Exported Values 
exporter_context: 70736575646f72616e646f6d30
L: 32
exported_value: a28eac67f1c7d8e0a7d10da1c3e65c7e7e7b6e788fdcd33aa3eed6
                f6037631a0

exporter_context: 70736575646f72616e646f6d31
L: 32
exported_value: 3929d2c79d0993cce923b502ff03811dc8328360b0dece71485a79
                94603dd3be

exporter_context: 70736575646f72616e646f6d32
L: 32
exported_value: 999f41ef5b39e0faf7b2fee973b18e2018c8d4da259949d4bea9a5
                95da070269

exporter_context: 70736575646f72616e646f6d33
L: 32
exported_value: b07d6319b68e5aa7cdade4fb7766ede1bc7d13d1cfac3affd706b0
                a424e8a48c

exporter_context: 70736575646f72616e646f6d34
L: 32
exported_value: 4fb7887f90bd5292d4c98acd92792ad4c7a838f83387b8ad138f02
                c5af92a090

A.9. DHKEM(X25519, HKDF-SHA256), TurboSHAKE128, ChaCha20Poly1305

A.9.1. Base Setup Information 

mode: 0
kem_id: 32
kdf_id: 18
aead_id: 3
info: 3466363436353230366636653230363132303437373236353633363936313665
      3230353537323665
ikmE: b6cc2b55f03081c2776579d068bf739a3ba08b1b5f4024a08742ba9479c84ecc
ikmR: bba0acb2bae9183843f4fcab325719df1f85185ac0a4321dc07c898df28770c5
pkRm: debf05a05f1915dd70ced25ee4774bd54e62abcbf599d323bfe2d1f204c93668
skRm: 7151ed52cb01f89a870ff5f60e8c2be7eaeaf8180f5c741309cd5fa4d00979cc
enc: aff395707b2a242b43affd25e43d58776ff83ca2fc4f41d084bc871bdd207e10
shared_secret: 25327be29b041cf5dc4c556ae05c9fb4c7edd4fc97ec49bb5e3d9ec
               decf7f1cf
key: 39333c6bb058ea731384f9f4c5ac4869cf1ca12f74c3a3797c201b85da8b338c
base_nonce: 75594df8aec04896f4c6defb
exporter_secret: 36c5769172c6dc522bb7f94b53f56e16915fd06bb46888b0be1e2
                 0d759f66b0c
A.9.1.1. Encryptions 
sequence number: 0
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d30
nonce: 75594df8aec04896f4c6defb
ct: aa62e6efd433c61b5a411c11ab9c83afde2ba13015ece24e3fe9208d9d6fbe8a66
    5f778cc2fda3e13bd19c28005ae0255870df74227a2f854bc1601fe313526704c1
    572e60d9b4aab1ba

sequence number: 1
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d31
nonce: 75594df8aec04896f4c6defa
ct: 06d31929c3e0d0c8bbf51d672f8d232782b3f39f162533192b31b729d05dab061d
    4907f0be8488b9d40d989c767d016b866adc0e6e1c91436b1b00b1caac7e290abf
    8838d33bcd7228cf

sequence number: 2
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d32
nonce: 75594df8aec04896f4c6def9
ct: dd31f435b5b61f23ac48c78773102d6c54ee8b519eea227110f6fa89e09cd10cc1
    2d8eb1c6395b0961a3b904a7eea16e5578ae8dbcefe4699777da2a15bd597e3b99
    1f05a5ec04e19ecf

sequence number: 3
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d33
nonce: 75594df8aec04896f4c6def8
ct: 1f1cf14041f5cc5c148b96ba0c3ab0d5994a2b657ac1c130a65b1bdb9b9ad3c976
    fda064ae22b719f3bfa067f0cee62e5a97ad97410ae73597b038a24a5344cde97e
    496df8cd6d7c63f0

sequence number: 4
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d34
nonce: 75594df8aec04896f4c6deff
ct: c783498840844a6463440cb835d8ea2bb16202c4ef8dcf7dfc968d9976e3aa865d
    2240d9327baaa4f9bda0bf680853c49b51f4ddc23de917a072ded015a845497eae
    2755f0b9ad53ea63

sequence number: 5
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d35
nonce: 75594df8aec04896f4c6defe
ct: b002a33133e8ca80ab3e7695b5e6a8d1ba70326f207ddc2a51fb9e23559db75f61
    bd2833f7fd0664a616eb020fb16a118b13e0cba16b04101415e70e1d7bebba1be9
    4f4a127f40662f54

sequence number: 6
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d36
nonce: 75594df8aec04896f4c6defd
ct: f3d99aedfecacdfb07e5ca5bd31c1c2658ca54981cd28e4f90fad6aa17a948ebc2
    64fe11ea30a55d6796dfc8326dcee480686f5b211c2b7e73fda374cac55f99f663
    e0522f2fb45cdedc

sequence number: 7
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d37
nonce: 75594df8aec04896f4c6defc
ct: 4a1081671aabf5a2d936bdce3cfd9577763f7854b11974ed66d6e1573ede4aba5b
    1715b02ccc2a6f4ca277e2dba04a50f9a19aef9eb13ffdfc96885c3e8d20b351ac
    48d1e755053dd510

sequence number: 8
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d38
nonce: 75594df8aec04896f4c6def3
ct: 0b864ecd2c43eb789afe207972daa5763708af6893b830e2535dc87a8f0130ee35
    1d40562fa2ee54e8670d6c0ba8ec94ce44239cbde418d0c2bb0dc48031452ae90b
    feee29359deddda5

sequence number: 9
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d39
nonce: 75594df8aec04896f4c6def2
ct: e5f88e8f8e71b99161a7cf1ed96aadbe6aa5753c6106de72075dbf3125ad5d87ec
    eca73392950f167e23be7e48b1fea7188dd6ab67e2d295406dd0139408ff80c80a
    dca17f327266f3db
A.9.1.2. Exported Values 
exporter_context: 70736575646f72616e646f6d30
L: 32
exported_value: d7f55336c6cad3b9167adf0216d32013395727dd377aaddf40b27b
                e6bff48d66

exporter_context: 70736575646f72616e646f6d31
L: 32
exported_value: a82424271723bece129851435bc5a6dabd52db0eb847174c76aa08
                81c3d8ed79

exporter_context: 70736575646f72616e646f6d32
L: 32
exported_value: f03eac727ccf10fd07ea444db49caf243c46b06909add8ae0c7186
                9a74379773

exporter_context: 70736575646f72616e646f6d33
L: 32
exported_value: 5f2c2608b990c8fce7b30badb76db9cdbba89b4f16b2e0f7ded3e6
                da700551ae

exporter_context: 70736575646f72616e646f6d34
L: 32
exported_value: f48f363a63a8f05000e8e3b27faca5dc44c73aea1cd6c0e53a3c40
                f4bd01fc7f

A.10. DHKEM(X448, HKDF-SHA512), TurboSHAKE256, ChaCha20Poly1305

A.10.1. Base Setup Information 

mode: 0
kem_id: 33
kdf_id: 19
aead_id: 3
info: 3466363436353230366636653230363132303437373236353633363936313665
      3230353537323665
ikmE: 5ce944f454afe857bcfdaff8e81202fd6c1850ab2b7f81ac21703e034c87da2b
      2d9aba7da4a3e2d1a395c961dbe17633757f324274b15294
ikmR: 05010b60198748053414d63c47ba705c6440c9cbe653738977d08c6ca32d0b82
      e27ba4ab996412f59f05cb73ac7ca0397ae450aa8f12ad3d
pkRm: fade88e04535766e153ba0b057f6abb2dd800ddc7f9c81261c4c36daedfe24fd
      f7da2f5509ffb5747fe176df95d2685ebf31a92f9d35d95e
skRm: 7491fbd4ccbb8c10743c87837d06c6bbdc0221dd527ca412503fe362360894f3
      a974d3bf98e55562ec592347b8279281069a744167477004
enc: 63f7f749b717b00162520b49a89e6ad570cd333b685468dab6ef2017a99b7e194
     fa3bf572cd1d44766f7c1f2a1d5a0642799b860533ade01
shared_secret: f2dbcd87d122d22995c20d8ff6640f3cf15a3c1e64ccca0f2f0a81f
               89819290371ba5a5739dff9e3d95845a62f0e28e1d3ba3926789902
               eb1bcf687f08219416
key: 50d9c0f76c495240501361876046a37de8439de9f70a48d44bb3df81506e48d8
base_nonce: 62c1fbc028752a16e82e8f60
exporter_secret: 3e4c62d4f0fa55c78539cc16ff663a54a1c79cb28ebb3411bd84b
                 98968061cc7220eefc446bf60aa064a94d447f57ae18d7621b5bf
                 68082939b8e725e15e5740
A.10.1.1. Encryptions 
sequence number: 0
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d30
nonce: 62c1fbc028752a16e82e8f60
ct: 5ad3ab9053041b1c06ff23ff1e3d6a1bdffb7ec3c33b9c03b4bde479dc2d0f9e09
    50513fadfa51d4a03a2f81222136f9ceb7e8b3ac9d03b5be9a17e98eb094617960
    5c4a8c3bc8070380

sequence number: 1
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d31
nonce: 62c1fbc028752a16e82e8f61
ct: 83ef4e5703b8b3e384f18d5860faee2653a749306859b405ce54a61f0ead7189b2
    0f717901cb7aa53908c6c99995f08874e984053f7b2d9cf8cbe43695bde55e147b
    a3f4e2d537011ff0

sequence number: 2
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d32
nonce: 62c1fbc028752a16e82e8f62
ct: b023a5543c582674a30a2147973ee1100b8c479fd755802da42c466a7fae18a4bc
    e3533e47ed6974366e4513c28278272d039144b0c1c1d53389d5766d42a67f28b3
    78ab015de8940c2d

sequence number: 3
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d33
nonce: 62c1fbc028752a16e82e8f63
ct: c54cba2dea9f6b11ffb2a1d19805d4d96c8f65564d6f01431037ba2359452e7795
    ec4f84713d74e3a0b11e065fe2cd7202853f04aa0932ea0b8731635f1af768761b
    47db5f61e3426d07

sequence number: 4
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d34
nonce: 62c1fbc028752a16e82e8f64
ct: 972268de3380f5ad101ee1d88b63bd47eb6459b176a43a5933d0ef3ec2d5cad641
    c1f7d46c0cd128d1b6d547b7cd719951e7f9973c0903ad03c2a7b8e9cd7fe18979
    188e0b01cdb80e59

sequence number: 5
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d35
nonce: 62c1fbc028752a16e82e8f65
ct: def9ef424da0409ac61384a355905c6325d84396c39974034b9890eca650a41662
    12c396ff52e04b2dd8a11fcacd7b49fdc5a8d859b4e45152c50714bac213b09e61
    21610c3fbfdba107

sequence number: 6
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d36
nonce: 62c1fbc028752a16e82e8f66
ct: 70be5945d0016488a7ecb8edd0fc2e28c2e5c6551f6b80162c4fda5c5286839a36
    cd4e67fb715cb94279d1d5b488518d1d5e7697aa13b78dc677129862098c2d13cd
    f4f4f32010bfbe75

sequence number: 7
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d37
nonce: 62c1fbc028752a16e82e8f67
ct: 962ca42b0bc9a653fdd9ee4875c096905b7a083fb2a2532423c139af182ae4b2b6
    ab667fa1b079a8f72b4e321d3aa5314634aea5335fbea86a88234d102ebabec80c
    4d324d1168621800

sequence number: 8
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d38
nonce: 62c1fbc028752a16e82e8f68
ct: 91e1977b06039ba6f87da41f5a606048efcf9e9bc8b5f35960d4b986f8b90d6dfc
    e5695f3bb8d5c36e8a65fd066aec7acd9b6707dabe53190d1b7823f8dfd6af22c7
    8c1d9ce6bb812949

sequence number: 9
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d39
nonce: 62c1fbc028752a16e82e8f69
ct: dd759d51420e6047aa826fd337133a7830fdea09e6db565af08d967965571889fa
    7a456b942994523a175415d34aa98205de6542311059f608f11acd4c2a99204e59
    b5aff79d04430d73
A.10.1.2. Exported Values 
exporter_context: 70736575646f72616e646f6d30
L: 32
exported_value: 2da5afb4fb6e17c75ab26c04342c5258fa49b8560d6097df09e5e1
                85fb6bafa4

exporter_context: 70736575646f72616e646f6d31
L: 32
exported_value: 082f74e76aa2aad139ec8d16a816b64157267b6151267c6af14397
                2b63878cbf

exporter_context: 70736575646f72616e646f6d32
L: 32
exported_value: bfe8ac225e0c315b3a896e66152b65900bbd1e6857ab1317f75b5a
                fa84ab524b

exporter_context: 70736575646f72616e646f6d33
L: 32
exported_value: 1dce8c0532f6555af6c509ec4e10e5e084052fdb6409b613dd88d5
                66c648728f

exporter_context: 70736575646f72616e646f6d34
L: 32
exported_value: 32e3b06e3d4ca33010b2ed022e04ad08cbc8d8b66f94630bf9701b
                0797cb6259

A.11. MLKEM768-P256, SHAKE128, AES-256-GCM

A.11.1. Base Setup Information 

mode: 0
kem_id: 80
kdf_id: 16
aead_id: 2
info: 3466363436353230366636653230363132303437373236353633363936313665
      3230353537323665
ikmE: 67840d6911546d7784d58166c17a43c7a19c5866cc6db1b0c61f509ba0315927
      e87cee3ed5836432af0ff3721e87baacf57de68411ba96b8d53d0bc6bf44abc2
      8d6daab4b0c2452f8a8e25ba5d28bc734191c29a686c65d852c941dac3764cb4
      4b7cdeecab2398339831370b9c3b2354e52385f93b09a46a6cb7fe80d94edf12
      f8ba4906884c5e007212edc9a26837a1d6a5e8b18f41453cfd88d2ddbba6e1be
ikmR: 2a881bc073b87cca19d9ef6992ae689d4c58b047c274b40784ec291734d7697f
pkRm: 2383c65847b054307438b3bfe68397875609e43b1a57d46573dc4c2992c457e3
      648d2b5413636988a33922f7022505b29183c5862625a8d3bd820714cbab89f9
      c1197c52748d011de275a7522cca2b866669c9930c84bac3ebb0a59662391b43
      7d312eb786662d19cb80444f352a75189aa693a2b13abab836c8b43eaba003d6
      88c70c9721f044cbd43e9cf49a508709775878c0438728daa8fa671da91bc978
      fb3a2110110c317155211457651392a7cfb2b45b4ce21aa31b9903c389967170
      f586065073a8688abd37298c829998c05054f9484ebf356bd90b1212880a27f4
      31277a15605bc85b6c97475b34e4b875bbc6b77799324520c0137510383ac02d
      48515ed01af7cc1265a4acd6c3baa3a50b0f325fbf0644e28811fef2822e01b5
      364906a7b99c152790c5099ff136989cfb6f04425622e15c107b329b49119c78
      7077497386dcbec64502a0f537d135ab2542b3653cb377c173d173cbc7b398c1
      9a7fdddb3ee5d12cdbba96379422f935131efc6831ca9e7f9a86fe298b2f2985
      4e3b9b9913831dc66bf1808a8a95ac30474fe467406c7b4ab45912b4e29689a7
      ad9668ba6b36570b5c2fddd56fcce0c348998488813fc90c0232e70f9125a31a
      aca469fc3764e23acdbcbb1a106ddd941f0b923a76f3a7f9a91582340188eb22
      1d1aa67de6ce503cb48cdc7762155faaabb96ec471d1236597c577bef207d4e6
      594319a0df1715d8c1988a234351a6b31c12334e59bc9d86050e7862f85b7bdf
      418f5fa276dec41adbb6c223ec5f12579d4c552779200fdf5b213476cc023c4d
      b5b9c8ff8b0ea9f5291f3789dd1c55c340111e21284a34a445fb2a27e7bfb261
      28b04c0de3b73ad6a39606a0a84e347c62c26e11e60f6b22a2234baa0fe6233c
      d82f42f282d90370a1e07050fc8edb3aa895fb03f3f29533073e82dba544765c
      70b44ec70a91aed89f60c63499a635b565a571d7a5ece50a2e994d3d1736ad68
      c5bb4bc3ceb76c00ec38764b0e2d912d3a91386ec3ab7e3785611c8f2c310cd6
      d8044b3caadf959799bb1bf7523ca3f8ad95597c35e46412503b2ffa46e88c95
      ba944d5e598e23a4a2b3266553d5b92e856ba2b95925574493c72abc02bdc201
      155a92600069194146592ed89cab8601ba62074db75814cba0ef3c55db1079b4
      a4402d477ac6d46c8ce3224e9249ec76c9971bab8124a08e2c1c4bda43dc3aaf
      f5a60b028c6ee0fba44f959051751712b09e8577207373c34f7cce084689c61a
      7f146cbcb697c400804f38d5b752a75f07451d737727c67acd67324f72173514
      620b0901829424cbe1a47525b69a9d56c579a884de54c6361253f134c503a09e
      cffca99e997d57388f9accae771820ff86b7fb52cd7dacb5e3527a0837841e5b
      58d2d1132bbc8c8d1359957c751ec7ca223b97ff214aad4a26cedaaf6fd6102b
      f68d65dc5d0db84befdc8929b01fa1d50d5087a2d19583340809e95861c5ecc6
      e76aa2b2f454c6283e6000cbc2209b86790316996fbb41ca96b0a84b877d10b8
      4bdc7b79afb945c909c869652a4174725b437b1042b40637a96c04a20549626e
      fba2dbe46d5f53c31bf4be525b990e3331d1662d8ab323d4555c253b79c3342b
      f81dd102c2d027661bda892300b317238d39b97eab4725270fe810eb3d89c13e
      045707ad11a164a1be68161c1c2a1b61498b85c35a755de03d6dbd567219d893
      37de6215e782776d25fc72561a739444e2829da8be092600506d008313752a3f
      32
skRm: 66273a348484a1872c621b19cf037e6f8190c80ea79938d51d78cbd88be4403e
enc: 3b451618d1a4a1dd3f52e6b2780cc3b35b61138143e8dfce4967be861c63f404e
     14756fcd7c4696259de3f2359b6855d09538c7f9456c2fc15ab1288a5d42c74c7
     3ebf6ef0aabc33093f19cd78972fa0161188eb2a3bd0d888e04ee2a0fbab2cf2d
     48d515b7ca243a00d9d23f01f6febb87ec42dbdd2a8c9953051e7526e0b4ed421
     46ce4e8bc9ae2b6f50bbbc22b5e7bbc5aac9ba06b5724f87b35b03adc38144b20
     2b2e899b9df940ebe7ca43a044ea68b99037908fd200468f8aa8572b63d63d81d
     71599b80843feedb8600aeb0049f78acc58befe361694cd3efdab34e97f97d104
     eb0e2d8a6358635b7b24130ed287aca8af4a4da143218fb4a25a0c0548003c57b
     aa197f77693a143db14773654f943edad81c5e1c754cba3b6573e330586915df2
     c93e0f9cca31f9b9797e52b8c2f9330fa880006c5a1b3090b21561848ee1ce8a5
     75cdf06e6bf018b9a877d968de5728eb8bb75c6364aa9a865a35f3adb5ffc6503
     2c9ad301f2994db70ac5ba5003e43500bc73389b467ca3492c48bcf8cee538828
     331bcde810e8a28efdee045f96cd20ccbcd8ff0c0280b7c8e5726deb2b0bfa8c9
     1dec20c52d47536ceb5fbe460d65da338a35e9c733447970196cadc3fb7021edb
     5e5202a6ddcc940e83cce3174a32415fae21ca78a8ad87aaa96a45fd0d0fa0d0b
     6c2a9fcea5939cc2634136f534985ca944ee2c7a8c14ff5502bca8829b721c750
     3bf50839899c35b0656c3d3965b98f27fef3c8efa1b19bc15e1d6dd512ab9f5e2
     1a5efc76ea24559387eb225a16bc7714ba958f81c38f33c4a33e16a997d575d20
     aa9bac25cbf7ae0c269f5e3c53d0189c518ca16b283659c9d29936e84e1f6c823
     b9ce54114e1cdfd236b535a437b8e079cd8c628b0421e7eae8abae36087538f53
     d4bef9a02e3648e9aaaa443eaafd8a5fde69b113c15929af5f4643cc59f0b7d01
     d86003ee63e369eba12cf18eeefe64b215fa0bba8cb1196c29559aa2d897fd0f3
     64ebee655b0e2591e0ecae521eab51a92e5adbbfa09868c0cff1c5db8e10c8d8b
     1dad6b443f7014317654608a34610ced2575b96a949cb7e5b52826f9b74240be5
     b43ce44a9f452eae036855e01c928efdc4d618039a38831b750e8244a718f6972
     2b3cce3b93a7d9aae67fcbbe4ee63ddf8604dca8d3868ffe163ac242603d750e1
     8390f8eee12567466296bc1655ce7a1d9a92bd872f49b7d0ea04002bb9ef1c713
     2e204041ba1479d4474823ec7bdfa371d7ef5c908e2a5b08c01c28c547cbf899f
     0f1094508e7f08cf5309d434c8a443ca255cef7f5fab7c2dfdc7bdbac947d6feb
     3b2bc3d4bbfc4bfc844e7e32a049cb0f0aa128eaabcb741b9c4fa9e3186a1b0e4
     5962e6d796b98fda7c0ecf7bcaaefe02b5293c3415551790e93f2d4ad9a83b00e
     4adcc6819c4d41d9670e112e0e67181e326f18bf0e9718b8354e3d6062c76b304
     88b598cf7af2f4a96dcd0e2e2ac17084092a80312adaab4b1ebd5cc325c0ce5f9
     6f1ae50717d3b1b6ce8b3f620679ac904fd97d47237d7b362698c647380a7e2ce
     91a3782d96930d893df4447039f895102e7b2305ea3506c9d68b90a26d4fba1dc
     03415d6cdf396ecefd7a94b27724c61
shared_secret: 9d2253e13a56e77df4cc2093d56c935ba16802a1068bd4c4f7915df
               4c8e931c3
key: ae09f7df51707cf2b42942cd88fefec4fa04d5bd186fd63c0f08b55d6d1762a8
base_nonce: daff3625a20bd400bb9d37ff
exporter_secret: 8f039cbfc19ead64309add23ba03d352fe8dda8369614d6fd82ab
                 4578fd94ec4
A.11.1.1. Encryptions 
sequence number: 0
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d30
nonce: daff3625a20bd400bb9d37ff
ct: 94b83d53eea6d673f998c65f4810c8401818bd5e9e86d24b77294ebed80e3c2a31
    451c6ce6b09bb316f04dcc6d24d099812917f5f9f57b70f0f5adb7577088e4db25
    6f5bb78d887a4d14

sequence number: 1
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d31
nonce: daff3625a20bd400bb9d37fe
ct: ef1538d8819bc60387f2de35c375a8470846802bccdf17fb53114c26b01d4ea7ea
    b73132f0d9a621d85644bc3030c2b963b0b11a804662de51873c65edb06f9e3438
    62b70d2cc85121b3

sequence number: 2
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d32
nonce: daff3625a20bd400bb9d37fd
ct: d97f92a34f96c0fb9fb351f212994f7aa4f21e73601f1eea9d97ed46acbbe41fa6
    ab4be8b4e5f2a3f60870dcb2c3dd8b28ddc472fbb64697ffe9bc6d3774da3873cd
    51f1fd4189a91d63

sequence number: 3
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d33
nonce: daff3625a20bd400bb9d37fc
ct: 73b16d5810b2bd59e9378335873469ccefeaf5d77d5afeb203577bf87366786319
    0c6428de124a828b2bd7b19dca570c4db10e9643fccaee4250e590521d6542fd14
    b0c2a2e26dd9efc2

sequence number: 4
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d34
nonce: daff3625a20bd400bb9d37fb
ct: e2824e00775603373708772e204f5433666d639939d00b7efe4a6a7e0fc8506cfe
    9edcff343fbf48d54fbf95189f180ca1dd415c53606f2953044230ca84c7a28027
    77a4e2deae25049b

sequence number: 5
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d35
nonce: daff3625a20bd400bb9d37fa
ct: 8282d0cd7652e7f39a20921a4711ee948facf1d4c4df5b6979f53952f70974ab6a
    133000e158d9b54b0111727c19bcbd2077e33dd39206892cb7468e9a8b9acf6875
    729088c9f3f7dc0f

sequence number: 6
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d36
nonce: daff3625a20bd400bb9d37f9
ct: d51b58f8e0a6b69837aa79d6c939baad5815c6b0911c3df3226e2500838d0f4ff5
    c52cedd11656df1c8697fe9ca6f5b0e309d3eaf1174125e312b1affd92c45c837f
    d57378802f9db28b

sequence number: 7
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d37
nonce: daff3625a20bd400bb9d37f8
ct: 148bcfd077af5374cdba5365af4d0fd66edf1350cdae4ee462697fbd897535875e
    e09e7bfcfd61df12b9cb3a6557f3aecacae42b31477f9a3bd17b821db0ad78828f
    947a04182490c216

sequence number: 8
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d38
nonce: daff3625a20bd400bb9d37f7
ct: 1ef0d51b32ab9c0e224efbe9ef1759751651044b50fbce517bee73ce72f19b37e8
    939aaf4d75f210810d564dbfd2c1bb0f6e6abb00cf63eb24752e10abdf4e585549
    1ff63fe44ee9bd87

sequence number: 9
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d39
nonce: daff3625a20bd400bb9d37f6
ct: 55f7440e586d22c73c61cc9f9c8a723c9d6aef2b90f8feea359cb066eba9ad7072
    25857d84963cbdd573d2087f64fe29defc91ad389168f06e1e6430cf58cd469d79
    28c85943def0f1d6
A.11.1.2. Exported Values 
exporter_context: 70736575646f72616e646f6d30
L: 32
exported_value: 69273dbcb0c70786d49f4a568737f67724cacaa1f80e1bef50bb36
                9b017dfd8c

exporter_context: 70736575646f72616e646f6d31
L: 32
exported_value: ac1b843f385b6c2a7a6d26edb38032c5091706c5bc855570b9bfca
                fddb9bb1e1

exporter_context: 70736575646f72616e646f6d32
L: 32
exported_value: 82f85d1631d357890d0fe518b35ad845db771c031822d2a1d0fe66
                11441428ad

exporter_context: 70736575646f72616e646f6d33
L: 32
exported_value: 90678e326de30078e260ae3802b17321322e423895db1dff99a2bb
                89360cd673

exporter_context: 70736575646f72616e646f6d34
L: 32
exported_value: 9074725fcb99ba04bbf861f4b42be52babef266ab66278ae95862b
                1a86f0ec1d

A.12. MLKEM768-X25519, SHAKE256, ChaCha20Poly1305

A.12.1. Base Setup Information 

mode: 0
kem_id: 25722
kdf_id: 17
aead_id: 3
info: 3466363436353230366636653230363132303437373236353633363936313665
      3230353537323665
ikmE: ac9639cf4581ac270569ed0fd1f4ab0feb59db2956c91c38fd1744768102f69d
      29ad8d4e9fda6043676fa808d148fd448397fce724141dd9b8e9827d274a9fa5
ikmR: cc6ca9078b703031842f60acb018a310030a04cd8046751c671ad247b79d35bb
pkRm: 4b9531fb494a29413d0ab36a92c7749d5b409a137f1a05c1385a6818308bd3d3
      2f1065b73cb9a2fe9b77e74b9bb71a4a1f0aa01568687cf413893951d5e983e3
      9904d0f3ac2cf457297741cb2658123ac5b0116863356b4b55551c5bb56faa9c
      80a62417ea90dcd683601c5d2a977d0d74010f975c15622d01451d97234761c3
      c8ff185c37a11acfc0c5fb311b2660c7ec28438498475d2c2dea12ac0387ce3e
      c4669450302fca9a0ab93bd7cba2879c730bc17d6b5417c383c1f90b98073433
      22f85d89abb16686bdf82176b7b36284678f017990ba4a724e36013bb38e5cc7
      62c6e8c4127536b44659e9890608d2bd355148d5e3024842011c800c5ff72e20
      da517aa669c1c78ec5a727129692ddec53d4d5aaa35016d63482d0a835977ca0
      bff350ebf7b4317259d25a03511abcc5d631c979cb1c18bb829c257dcb038c50
      85105aa88e5744e9507a247877796693f1631469f29dfab7a5d1ccb818c03ff6
      52c4a896b9aa9264192b2f316973eca345c1f29ad6d9004e6a76afec630208ad
      6bc058eeb81a1380ce567b57ec24a1f4c725611591e85a8bd0d8a306e32fa700
      2fdb4c9ac9d02c73f557bb9c0a5f55295c33b9adbc4469a6a321eb39dbdb13fd
      44a556200e33184fa44346741c12fe097b22c778fa25681d954da3843a609a1c
      cf38478658883bfa6b314b6b93e11105884a59968a3cf89beff4717db7ac938b
      89683bc588c6553389b53ca744099741f1d96e84ab93aeabb10e4b5d1269244f
      a93b5ff27298872346733e38c48e92f817e1e98c61c220a1069a370581064646
      3de7076c207d5d40b7dd812f58d8acf171900d7b8d9fc56f1c2929dbecb76580
      554ba6b0b0447a8f6a6028f4cbb1933a58a26186cc4671c8caa6286d9124cb53
      b82e12d90beb792cec4c556dac44c49a37dd49c2d42a917578ac08a51699331c
      79babb43ec2a3647cc37db9316920693e194990baa7443a507104d3b62b015a1
      99432aa606b4613f8cc63bd0565d66ce41d59b273bb6cdb95ebdd255029cbf6f
      6221aba898f2a8868239975dd00c9a520b394849df134b318cb4e2b25fad4b0b
      92d0c742bb3bd0c8c98ca2739048277d4b2056f3063895613d0a06a3d9a3bb86
      cf47d8158d10cc6537008a7469f3fa0609604d896918e4676598232b30d9ca52
      0ab308610f92d7b4cfbc3dcbe14cf90c925000501737a5b0f61f98006ecc7c21
      e934c547e4800d54b2b578c9b4f435eac666094720fd45862a07a0121c0971b5
      7b3fb69dc2c4b47dfbb47504295cd58adca7c0da5244dd7550576545b214c937
      96a9c0458b3d887947f8bfa88959e7f1c72821548eba7ea9f74a787c2b40b962
      ab58835a52524a94079a61284d7acb4943a54a117fc71b94776b732a644f66c4
      51fbe34593a44d57fb21348799608959fad5c84e990951aca92c8bc68e084d2d
      596307f586be8cb3e043507be17e70312156eb6e464cc530377d23f32a48fb69
      21ab320a324fefa807c3cb262c460d9c1c8a23c9314cc3847fccc66c9519ba27
      56f9956cedb8b42a38cd25f7237cc7ba5d50c8c2ac446fb7a4a76762c5f151d0
      4682122057e793851a3496d5177782c4afe2688a7ae2a198156d0cdcb4c64c8d
      282661abe19ffc2ca793ee9a2c190c5c6852d1d743384730c92c1bd82d433364
      2a14f7e3cdd98b1791c98c1a09d3a0dd71b1e253cfc077801a0c2729f53a3023
skRm: ade62d76461f5fb35b5de3419f10b4ab4cfd81512da8e8a094d51ad9746d9868
enc: b0e05d539064754e11737ec32a268888b7fd7ccc11cdb3465860b26e75a5976b1
     e586c83503332c395cc312278d3bd6a8118db9718397dec4bf7a7f0ddc1d9edc0
     d0072b5bd8fe4861d6a01022cb3f30bac913753c60ce38fe3c322d60ad4bdc416
     82b292bae49226e1b01736877d232034170046b4058111d12285c47b0a3efae9e
     59654d3a7ee637d4b2fb00f17bd9337bf98cb59acf2ae53db40ca11910bfb639b
     82b15d9fd4be09df8d5e7b3acafa9cd24df808ea8557e86c325d49387ac8b2b96
     16d1f76efb6fd026345077641d7fde4ad3a83ff10f67de3eb4ec48f3045ed2032
     c3a9ec9642cb70bb7bc27d0b56f0a6b323506b8d25c412bfd25897f228122bafe
     2e5f8e55112c9f8e7c29d6d2498ace41742b7fd0e31a12afb2bf1beebcf63e387
     b0826e5a69594293dc2f241cf7dfa8cf27391680f3d72e8c90fded4605058168c
     e313a9de059d1a7e34f8016e62f9c824f440245498f463420b7736446b8fba0f8
     848b00094cae0749d2f2fc6506511c7a43774eef264fb3f8b20c46f50e394a325
     dd2de4b92aeab2db9d8f29e7e547766ebcf78000a1d33a74d0738f693e6d2389f
     6b6ec90a608b50f07608c417e10f6f7ba0f0e489faa6bb93b78a189ce8a020358
     57628c44f3edbdcb5b1a61c0864209b5bafb7ee9900605321505bcd6e1579f62a
     e97ada8c030ec7fb3591142348739b3aa3ceea934b0f48619011301a2997f070d
     e0a064cff27beb55543ba9447e6ac0e94dd171ac471ed3f773c4e34e9442c91da
     655db39895a2c4f290e900b0c3b37691363a1ac5c78db70750ee0ef54f80ef631
     cfd920d78ee1686f67536cbf1a74fe19f90c20eef96b02e4e34030a0ea833179d
     4ae5a6c17c423271b4ad59f9045453a876561275d93d82a87af02c15a5513d853
     7d954fb42db00edaabf8853840f00bc618432c6a9cd94b990549a35bdab4b1be7
     a101862a3e7aa36f24513314751b2a6648f7552a1672decbca45717098c6808f1
     2f341139ab75b5af14f895359b1152f638a3cbaacdb355ecd1af2daa5ae121d2d
     c68c13713dd99f738e6c6d9c7409365dab6027ac1a7a71e0e6d2075a1593cae0a
     664ab04cb0ab0711b15a5836e1eb40323fb60477215fd40f9b6b52ac7b2e73dde
     487d729dbc3c7f976adbb28edcca8948b1a22f11943d367452e817f20ed27d4fe
     b5341e4078164bb0010643d91fad31aee0c446274cc511501ecd929f83e8489dc
     385cd1d2173a7e63791d5a7eb7d0115389e9a604a999a2a9b443655876187cb06
     0ea8bf5272fd06b85a33545ffd7ec6e76e866f6f58c9f3214f16125bd541cf0dd
     22a40042e19abc47462f7bee257958d330a74f6abc17c3dc1f23fd7da0b274eab
     80dd6691c94ed5694cfbbce7d25e3a37b94358b87b57777ebf82d9a852301e335
     3bf6356f26eb3d293ac97477b34734d7c1efaebfd2c22d7820ecff59b7da55ccd
     0f2a54e645064612b716736543948bfb20234ef9d5a61e0697d8abc940711632f
     56a14177de163c7d0b1788a0cb17272175ab893370766d75d28680cc2593902aa
     fcc6ce2f25e3b71a9c1ff5f0871a0c
shared_secret: c3b302f7ad7e13ab4713facdd0d8058507133e966519acca3af01ab
               2d5c96549
key: 946a26bbe80fcb3b39e15971fd7f4b41f05826073fcc015c69a5c4a430166920
base_nonce: df9df51376022d86761ae77c
exporter_secret: 3e5b5eaca99e2a157c08013d7ee6c5ef40c09f9ce2855319dd8b0
                 1173bfbfbfc80266664365ec9d6a7ec10c7804a41d3f482ac7d53
                 0018e3e41bd2b5fde27087
A.12.1.1. Encryptions 
sequence number: 0
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d30
nonce: df9df51376022d86761ae77c
ct: b6fc2a492f5c22a6ce272b8cec7bb643f3ce657fbd58eff2d689666bd7c67fd1fc
    9d8626b56be90dba0277a794220f8cbce54dfcfa07572c7c88266a9608ea257a8f
    bbebacd960d7804e

sequence number: 1
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d31
nonce: df9df51376022d86761ae77d
ct: b63342e59afd93e0de52d81474f3a6d58f828e065235608172c6e766debfe0b943
    d3549dd920b55cab0cb6b3e4fe9d4dd543636255f7434463cfeca6a55cb1b336db
    1a4ff89659bcc62a

sequence number: 2
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d32
nonce: df9df51376022d86761ae77e
ct: 4d8804e072fefaade1b3a50a6bc7f68168c914044cc42a59b71599e5d3d11314bd
    e545bef1094f97bf35ff95753d8ebddebaf3a372bdfe1604dc00b7905263683c81
    c3adab0b181271b3

sequence number: 3
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d33
nonce: df9df51376022d86761ae77f
ct: 62c8227de4708510ea92e1a17cd83e1d152b9554d12cd2a66ad0114c1ac5fa671b
    638a7093fd5580204460bc244b68d059781ea685a09c820646616b537ff858bc88
    a0abc249deca31e2

sequence number: 4
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d34
nonce: df9df51376022d86761ae778
ct: 62becabae52c623b55a3d2c36b3095ec9f2c8288a4bc1c65501bb2b538c0cf9cb2
    381ba491d84f98114e77d2896049be153fcb22b4d1f1630f78b40e9c7aeb8f082e
    4e28564ed22da5ca

sequence number: 5
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d35
nonce: df9df51376022d86761ae779
ct: 5680b5a63112f7e5d2ef8ccb6ba565789d84aad2098a30c0efcebb415ebe81e34b
    8ef8d7eaf98867c4f8b15a5e7b3d9a3f6e4d5ce58d145a15e434aa1dec0fbcf4a3
    59de7c94f0d4e6f9

sequence number: 6
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d36
nonce: df9df51376022d86761ae77a
ct: 086b84a7d0e4a326412bd105682607ca4964d886d064b74480416e9ab85aca603a
    e4c99188a27eda316dbb9ed21f717748fa83b362f92c3d2e05550d992f9da72141
    3ed5f63602cb833f

sequence number: 7
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d37
nonce: df9df51376022d86761ae77b
ct: 02b96decddff80c769b615b481c01896a81faaa0d794d494192d93aa84dea4121b
    aabbc2ecae188e15e02ce61dc7b7bed8223d91f7246284d7159d7580718cb5ccb6
    54d1de5209c71351

sequence number: 8
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d38
nonce: df9df51376022d86761ae774
ct: cf1123ee5cc11a0ec0cde956908e607978ffc7009088f5e2bfe282bd9a11f6866a
    b7712e83cea23dc7645cd2000d4a7a8e006382f9bd26339f77e7c52e824ac79ccd
    809e57d605b54de2

sequence number: 9
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d39
nonce: df9df51376022d86761ae775
ct: 29c85e9faf72c45f9bfae777917fcb92e51e1c4dd416e97521680396e359269058
    e9a0f48d2cf2f7a924674e0c3afed4716badd6c9506d3f8bd52eae56b15580edfc
    4bf814228ec5ad89
A.12.1.2. Exported Values 
exporter_context: 70736575646f72616e646f6d30
L: 32
exported_value: 941099dcecdd679acb7ff4e090cbd9b6626c9a510d93779cb81224
                9e4d9060ec

exporter_context: 70736575646f72616e646f6d31
L: 32
exported_value: 3e66c753c7772c1cd27cbb1c84ff40e00d32bb0895a9b5dd78e59e
                8a83489478

exporter_context: 70736575646f72616e646f6d32
L: 32
exported_value: 7e3435f9d912542a08938b8d3e22f6caa1d3c0ffa892ace8238d4b
                816f39ebee

exporter_context: 70736575646f72616e646f6d33
L: 32
exported_value: a648999e752e0c633c3bc1efdcd3ce1bf39f62f8232cd1d669bb1b
                96dfe1652c

exporter_context: 70736575646f72616e646f6d34
L: 32
exported_value: 3cb5f55ddf3b0eeb568853b7b90b3fa39c6eff86f3d7017466df45
                e900e421fe

A.13. ML-KEM-1024, TurboSHAKE256, AES-128-GCM

A.13.1. Base Setup Information 

mode: 0
kem_id: 66
kdf_id: 19
aead_id: 1
info: 3466363436353230366636653230363132303437373236353633363936313665
      3230353537323665
ikmE: 8f46a5952c3a4e8389332362367031eae8e9f40036875ac1bed7e41309d797e7
ikmR: 5248d849e9eb63eba3e3e314761a160dc082063ae9874437ae1bd269d70301bc
      897f174128f521cad81ed51c8353c4eae8c5f00e477a165096d833d723312a9a
pkRm: 5ffa624d14cc6ebb1edb1c255854cf46a188d1e19d09f0a4797488e7da0df121
      033dc05ae10126d899466ecc4c2ca176fe73c3c4cb9487d74cab8c6830838de0
      e5c2b85119f1b9157d48cd246aa4ce31c28a230e2173a45985a16b5b0705d541
      b4721021460a7b6249378c18b2788e574a287978c879ac3e49e015ac844dc946
      218bd4cf7cb75f82063bfdcccb1fca72f5458c40f31056117e75139b8e235df7
      fb3557e580ca6b710e9972768844fb1b041b14557af1425b1c338eb14b4a1cb7
      4b022fdc93b494d6b4b71b2cf4462aad19a1476188ee684ffa5c2d8d3c65c10b
      80ec21563ccc5c1f5862c1c3afecb4aad57b56170ba93e8c15bce06c0ef194e5
      60c4da0b5b801420040a396ccb4702a6b61237b24c791db1a8461e2408011169
      5332bc50c004d439b77ee067ad2299aa268af5f034462567a6b0a1b4376093eb
      897fb44b43c59131d2416c96b889941b9ba6933bda7153f282bb0c8cb0635eb2
      730f1b4b94b24a0104f979c3599eb9d0bae95387a4f55dc766858c438a4a3708
      7b4544fd80ce85d6c8772368eaf91d41353ed2fb8f3822a3d1d14729e33492bc
      b2f6cab75e7723862b2c90ac813a0c78abccaae713270b54419f33211fc51d46
      caa445533af7a4bc731b0998ac0df098074fe5257c653540e984797a2422434f
      471759c8e9356327a5d1f83760fa5baf260a11a0348723c65d34219163296df1
      b345d183d4ec3234a08af27540f907c0e99ace9353a1e9f35107f72e104a137e
      82c4a721848b85031bbc0dcb81718b991455a9554d9a1d58e720778a374fe442
      e7217a6389ab83eb1b49f13344a07b03ab8e32361bd8a54a6fb163f40588a171
      78e2ea80e6d0798e0800f7e46a74417be2f61437b168fb514612ac1676b859ec
      d652e4741e1a43066c4527a0818f98e8026ba562bad3912b55c03849812461a5
      33b450d927b96d7ba06c50831f507431472a9365507880341e71784aa99990ac
      0bc2c7b1cea54a8d03b2dc3a22fafa7cf5a377c2834ede9889d1758b37c0cc93
      0b559518a342b76b0ba820b4879e5f420139c725a1f109e909832300850602c1
      c97cc7b7731d2033b3adb0a471a67359b62ff06504b6c44e10e219b03ca02d0c
      ab0fcbc016407a643aa650e3b8d929b65c662c732139f7bb764cc41f314cc066
      26176244adc8047cf80798b4a44288e6c376aba4e648a7cff12a1104bf13897e
      3d73194797466ed044bdb764f6b20ee366a316f1314b73a72a23c178c752c214
      33df5204789054a005ab5db1560588b838d7bcb5b645a101cd5034a35b5ba1a5
      06394f31c292cca739e308eecb2ce4367d2939aae389b109f62f342970e6f375
      7c5a3877a03766893ca9a942b3477b91666b9025b443187cd10a9b0b204bbb77
      62649c2a14abca1ac3be3bdc99dbaa639157b2f1e4ab25ccab594853e2115560
      02bd97f21218dca3b2ea2965e82fcc23559f8c1b4b645a38d1487322007f309a
      660ab505c7ad80a62ed92b3ecbd6185b883c7c866bcf62bca53b520165c04572
      109886be875446b6579b8e2586fd314a4a489c9ab005d1e5c80ef59f86f58595
      24be64911c7fe1607042b6829a63e8b239b505ca27d28bba602e28a39b3a543c
      d0c25c103a9dc08224f7d8ca9d115a22d29ccf086b964bad24e477298c926a3c
      9ea29837bf519e55221cad98cfb532a42d331445b5a5bd58753d13409f6a8fc1
      07405a10698d3973f7f07eb649751466b52f382128146d4137c52177109e01a7
      bce188eab815a9fc515021bc5432a577e44d21f56148f7b242f956c656872504
      8032e59efcaba616a89d4375483c416a1e03653e6a4fde1497ebb51ed9c2b864
      e23babd27e6d34cb6fa618c750ac7999897dd0b963ac3294e967b92081054ba0
      76d40e7a6673bd3a72f3d9b6e9930d2d03062019095b8c7ddce377f9b961c174
      9833c95ae29723c4e7b218bb52fc2cab6f462f81f4769c9c8c32280ab92275c2
      9780a17aa2d373c7d5495591145f5456024b4bc2816148f0f326a9ea38ebb10c
      f43987760c8ff8693e84c079f9754d57050a46b9268bdc2424a83f270459fe24
      8784903b652732417190fdc90ceb96a86f5734e23a6fbb590e445b0acf47cc7a
      ea2f976a0395d5c63da03593548484a229b3da00cfaa453f579dd6da55d14a93
      f6f24ccb37dc4957d7d826b733ace150b2c9bfebabc07a531178e12e8481f2de
skRm: 72340a3721852dc4f996201382edbdf8b9cbd61c6f9c7874507b417d3467b1c0
      ad997ac9e874f3c03a30a0eb1c3f1bdcda9d5d6a812612b761805b9d68f7f35c
enc: b7632dab87cf3b7178783b3ec0309525d6eda88f19267d212b001674c630902dc
     fd7b91f2625b50140fd7897d690cc4fec735714f2dec501100b1b466b231c368b
     623aebb1ecc96f2545a247c550b333ad0ac996dc09d081b394165867885374f08
     dfc3d86cc7a904e6c023ca50b2e3f79c22be09f60f17420cb40bc5a2abe49b003
     55006940ce0295e66e0822d063312bb2f72864982f1b36a8c3465e7039ee510b3
     831c8e015f397f5c3a7bd4216ce7172775d5e2603f9c17fbfda1c1d707a06d329
     9ecb7df089d384e1eb8d861583ca65a290910be1da9f25a62f57aa56d7d844758
     68e28f73e40b36f24f5a08141ae5d3fba07e9ad9162065105bb52a17c0a1840e5
     7e24e18083c5103db212fde229613afcbabe6b8902ec9d7e11057f8b30e67f075
     d6a7398d9de932ebaff25a414ffe5be40359ea10fbd3e205ea8626eacb86694e7
     ffd9a67db72390070e7765d181911f93dfe44291928ae4bb6aa0a321618282c91
     6926f55880b9c2973771eae789fbf0bf1530eae47209b4ce21c6da05545296d9b
     bad9d0c52a4e1bea9a642e142c80f80c8dcc75bae5a91eb68571980ce4e4fc194
     5196a3c97c7751fe7332dc6d80a725006f22d18dee894fa0a048a37ce4f36ffac
     11cafa45affa0fede3c96f4a965b1e64d4021273a3ef1ae2756b73aa860ef4267
     05b5fc8db9849530ec6c2a8d7b59b0aaa6e3c488c3e38b2ac66c2d219e67a69e8
     b05cbe6088b3e55a7254d6edb1393740b6d3eeeff7890aa134bdf9dfdd26c3746
     6205c64bb4b0d33002e6a0516d7e4c66da312bb3787a3a4a014cbcc893218adb2
     0816653419774c79fd96b8d9f9ec5fc4228b667dfd422abbfe63eab397a795a79
     2d5282576f2fb8fdad845fd76b1a4c36ac561667d7137097cb05f1dfa263b0fb4
     57582b37751d0e99ba5974da35470648f27c8e292040ce7baae171cf408b4dbea
     49119e4a5231fd7dd05a7de7fb9f0eb299df1d902d6390db5286050d4f3679970
     cef6aee3d9f146f4fbf383190c4bc1aef8f9c926db1ece0d3dca1ab7613879cfc
     7cb2f57b917bcebca4ebf699d6921f1f5c5fa3975f168e7cdb259b55a264dea83
     f23562b78972552cb5b0364aa5527efd1483a337940667f1909b87dfc8e069031
     65f38ac4d89a35ec5a4ba2180aabc127ecb60fed90d5c4ef9c5d5d8091da56cd4
     55521cf7b208b4b44ca1182b3d45d9905b1183efafeba676dfd1c5f1a0f94cc35
     a94db90b9328d4351867b8c20af9acb8bed9e51240b43c777c524fb21c62629a9
     7cae48fed9aeb8d6d00ba0dd61880b0cc28b640de6ef28573f99a5ac37c756f43
     7fcf4ddcd960e61830b38c90474dbd69017c59c11488adc82fa811a9086a747ff
     6f1cc2178cd6f2878cae026f165287551b3aaf684c68f65679e62b51f40ed5b9c
     9e1d585ebf5b257a5852bc0370f3c124ade2184b1366bd5d0e1cb5c66136b7692
     81eb00088d5fd3e330d13a277db40e47664567934f8e03a11c3feaf0654294dd4
     e6c2da9fe60cde90cb6fe8fdd3ead3ea468d2ec29eca921376fbc38dd2c4c9a17
     99281f7461b21426b9300210883d6f4f061bbcd9277b3a2e502b9e8a42e2b2270
     5a17eeafccab6d4e16eb251299eb7209842a07ac72689340d607c20dc3abd6bd7
     abe27e6e5b80a30b8ea00bd11f2b1d92c4f2641f7307e31d53dbebae3bb2b2696
     c7f3c7198fd879ef3b6ab44f03893dbf97ea857476f5c4578362dda11c54e1760
     55d2e1888d185533a9d672a42168e212f51647bde716235a1194d91d347cd5549
     c02a555c791fab6242f7270f70c1a28ac5f617742b865b26ed408c3f5b188f572
     688cbf4f3bffb4de6977c32faff6c741d5608c3e4b9aebc0817580a894dee345c
     a3303327e0cb5120198d99cb0cee0b00a36f1bfbd076998e70568d8f20e05ce7a
     42bddb0516318f22ff61f6f405bdb72b14734830d830ce389bdd2f89ca697b9fc
     198e1e6f4cce9218d0c62679a215e8c5e4b51e9596071254bf3cf7334b4622fca
     088d71038e80a6c94b07ef4317e355c6708b5f4f0a6eaadf6075f70e4666a22e8
     992f174131f3d61c3683e2ec0218488b6802aae4b1059dfbefca116cbdda39a75
     74143d17b1b8b201e8b8417cdd931872b00871f3d7554b52f6d6745d62e611697
     48e598b2f05b0baabb37a801a4b97602d6119405ff56d0b56771ef413131d1ca0
     33a94d745ddfe1d0
shared_secret: 7c27e161899a7fa30d85fb53381365248bbd13995c2b02320f37c8c
               0b595be5d
key: 5ccdff49884c1c2872c37463874389b1
base_nonce: ac12fdc34e864fae75aff5b6
exporter_secret: df8f4ebcd09b7f3769ec59b5da167053cb96c17113b764137f9e6
                 22e589caa5d80ab7a64fd96f60ad627c4a5b2a7f06052b54c2cf3
                 29f0e07c5500f6a7fb4cc6
A.13.1.1. Encryptions 
sequence number: 0
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d30
nonce: ac12fdc34e864fae75aff5b6
ct: 2e250e8f82eaa9d19df1c96db0a99f778383299b7acf8a886d6aa9524758afb664
    685d234abab672d2625f2d50622b11c072cc9beafc89774c0fc8325e47c86192d6
    0c4553737f1cec38

sequence number: 1
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d31
nonce: ac12fdc34e864fae75aff5b7
ct: 7adc01f503bfb4307ba40468146df4d62c45d1ef6ecb112b6b6079ca291a15b418
    958004601d54d6a86d97de92f2c4d31b45dca1e4d9a4695694cdd12593426634be
    531c858355244d89

sequence number: 2
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d32
nonce: ac12fdc34e864fae75aff5b4
ct: 2a9bc49c387e2d290c8e6cc28d98266d7e92771f2c2c5d3dc2d90b6e0e6317afcf
    6967db70b2dcab4d00f6f8166eafe3792ab9da22a13ab5f24e2ad79f33bbae6649
    b1a0c6d23f76e7ff

sequence number: 3
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d33
nonce: ac12fdc34e864fae75aff5b5
ct: bc88b7e4a9d770021f6f65e6e8ab6c0de7a1e9637fe4516a763a905514facf5060
    de298628b6bafdfe1937f48df75cd002334a8fe97558defc2d0b6861141c086298
    3ec2e9b714a671d4

sequence number: 4
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d34
nonce: ac12fdc34e864fae75aff5b2
ct: 5f111a73c54102238968994a4ceb3b4bec52833d08a7150f553808b17c13f3e31f
    c274f0dfa2872a0689057f2ddee0d4a7071411302969e0f922ebd00fa7df83e4f1
    0bd3a7595690460c

sequence number: 5
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d35
nonce: ac12fdc34e864fae75aff5b3
ct: b438380fab3c3d79f28ec383a5f5f67902d857e72ff7dac003b8ea744ac564bb5c
    dd5ba33038739c3b916f6db017d4f90181aad9b032f35f9ed0ae299a105c96bdf0
    ba6026d83e0d6c3e

sequence number: 6
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d36
nonce: ac12fdc34e864fae75aff5b0
ct: 8aab06e40480535907a37559013d6872dc6e15575f3bda4676a24c63d2f5a61f20
    e2544d04f17ad175260a93fccfe6bc937d14fc17c7077ce37472b7a3dc2d1ea667
    c348b5c46b43c054

sequence number: 7
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d37
nonce: ac12fdc34e864fae75aff5b1
ct: f5a7c6b267c52065175e5d2cb197df64a9255c0f06f5e289f358e33823c6086304
    8a8b8b75d5eeda696b5698360e9551ecce8a4b861cc77694a1131c58d57650a15e
    c07a05a61606f031

sequence number: 8
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d38
nonce: ac12fdc34e864fae75aff5be
ct: 86d31161aa3c2d4a3ab9c28185677106dfee590ef8ad0852ee6b97b285dbddc23a
    a5f4e17956cd515c54bde2d368daedfd4166d5e975fc308b45c6cb96b3b20629dd
    29d84f36a2765851

sequence number: 9
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d39
nonce: ac12fdc34e864fae75aff5bf
ct: 34f5d546f195076eb824a5de401d3f7c43ce9a1f6131809645c6e4c9d9ca2b9c88
    78826c221538daa1c0192a250890693fc3a85559df877b6abc2dd5b902457ab1fb
    ffbea97704d6362b
A.13.1.2. Exported Values 
exporter_context: 70736575646f72616e646f6d30
L: 32
exported_value: ccb2ae445e410cdae9b4c78cb0d624c02feb2947d62d46c2c2f7e6
                d0025d72e6

exporter_context: 70736575646f72616e646f6d31
L: 32
exported_value: 957e029b2e7f98ff23d8f12810c3450cacfc5ebd610f6dcbbe4219
                9d07690e2f

exporter_context: 70736575646f72616e646f6d32
L: 32
exported_value: 5829b84f811d4f1725b8153d5d01d91dbbb949480f81193d84c8e1
                1df004fcab

exporter_context: 70736575646f72616e646f6d33
L: 32
exported_value: 8d5cd4c3a429e214492f59d05119e9c627262502ff577ff0b6f148
                35f6e30c05

exporter_context: 70736575646f72616e646f6d34
L: 32
exported_value: 4cc7aa171db57041a5e22b4f8ca46c154f0e305d339758cf59e110
                b128edca52

Authors' Addresses

Richard Barnes
Cisco
Deirdre Connolly
Selkie Cryptography