Same as Decap, and the recipient is assured that the KEM shared secret was generated by the holder of the private key skS.