WithAuthEncapDecap

RFC 9180 kem_id

The length in bytes of an encapsulated key produced by this KEM.

The length in bytes of an encoded public key for this KEM.

The length in bytes of a KEM shared secret produced by this KEM.

Same as Decap, and the recipient is assured that the KEM shared secret was generated by the holder of the private key skS.

Same as Encap, and the outputs encode an assurance that the KEM shared secret was generated by the holder of the private key skS.

Deterministic algorithm using the private key skR to recover the ephemeral symmetric key (the KEM shared secret) from its encapsulated representation enc. This function can raise a DecapError on decapsulation failure.

Deterministic algorithm to derive a key pair (skX, pkX) from the byte string ikm, where ikm SHOULD have at least Nsk bytes of entropy.

Parse a byte string of length Npk to recover a public key. This function can raise a DeserializeError error upon pkXm deserialization failure.

Randomized algorithm to generate an ephemeral, fixed-length symmetric key (the KEM shared secret) and a fixed-length encapsulation of that key that can be decapsulated by the holder of the private key corresponding to pkR. This function can raise an EncapError on encapsulation failure.

Randomized algorithm to generate a key pair (skX, pkX).

Produce a byte string of length Npk encoding the public key pkX.