Same as Encap, and the outputs encode an assurance that the KEM shared secret was generated by the holder of the private key skS.