HPKE Publication, Kept Efficient                               R. Barnes
Internet-Draft                                                     Cisco
Intended status: Standards Track                             D. Connolly
Expires: 17 May 2026                                 Selkie Cryptography
                                                        13 November 2025


  Post-Quantum and Post-Quantum/Traditional Hybrid Algorithms for HPKE
                       draft-ietf-hpke-pq-latest

Abstract

   Updating key exchange and public-key encryption protocols to resist
   attack by quantum computers is a high priority given the possibility
   of "harvest now, decrypt later" attacks.  Hybrid Public Key
   Encryption (HPKE) is a widely-used public key encryption scheme based
   on combining a Key Encapsulation Mechanism (KEM), a Key Derivation
   Function (KDF), and an Authenticated Encryption with Associated Data
   (AEAD) scheme.  In this document, we define KEM algorithms for HPKE
   based on both post-quantum KEMs and hybrid constructions of post-
   quantum KEMs with traditional KEMs, as well as a KDF based on SHA-3
   that is suitable for use with these KEMs.  When used with these
   algorithms, HPKE is resilient with respect to attacks by a quantum
   computer.

About This Document

   This note is to be removed before publishing as an RFC.

   The latest revision of this draft can be found at
   https://hpkewg.github.io/hpke-pq/draft-barnes-hpke-pq.html.  Status
   information for this document may be found at
   https://datatracker.ietf.org/doc/draft-ietf-hpke-pq/.

   Discussion of this document takes place on the HPKE Publication, Kept
   Efficient mailing list (mailto:hpke@ietf.org), which is archived at
   https://mailarchive.ietf.org/arch/browse/hpke.  Subscribe at
   https://www.ietf.org/mailman/listinfo/hpke/.

   Source for this draft and an issue tracker can be found at
   https://github.com/hpkewg/hpke-pq.

Status of This Memo

   This Internet-Draft is submitted in full conformance with the
   provisions of BCP 78 and BCP 79.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF).  Note that other groups may also distribute
   working documents as Internet-Drafts.  The list of current Internet-
   Drafts is at https://datatracker.ietf.org/drafts/current/.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   This Internet-Draft will expire on 17 May 2026.

Copyright Notice

   Copyright (c) 2025 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents (https://trustee.ietf.org/
   license-info) in effect on the date of publication of this document.
   Please review these documents carefully, as they describe your rights
   and restrictions with respect to this document.  Code Components
   extracted from this document must include Revised BSD License text as
   described in Section 4.e of the Trust Legal Provisions and are
   provided without warranty as described in the Revised BSD License.

Table of Contents

   1.  Introduction
   2.  Conventions and Definitions
   3.  ML-KEM
   4.  Hybrid KEMs with ECDH and ML-KEM
   5.  Single-Stage KDFs
   6.  Selection of AEAD Algorithms
   7.  Security Considerations
     7.1.  PQ Hybrid vs. Pure PQ
     7.2.  Asymmetric-Key-Authenticated Modes of RFC9180
   8.  IANA Considerations
     8.1.  Updated ML-KEM KEM Entries
     8.2.  PQ/T Hybrid KEM Entries
     8.3.  SHA-3 KDF Entries
   9.  References
     9.1.  Normative References
     9.2.  Informative References
   Appendix A.  Test Vectors
     A.1.  ML-KEM-512, HKDF-SHA256, AES-128-GCM
       A.1.1.  Base Setup Information
     A.2.  ML-KEM-768, HKDF-SHA256, AES-128-GCM
       A.2.1.  Base Setup Information
     A.3.  ML-KEM-1024, HKDF-SHA384, AES-256-GCM
       A.3.1.  Base Setup Information
     A.4.  MLKEM768-P256, HKDF-SHA256, AES-128-GCM
       A.4.1.  Base Setup Information
     A.5.  MLKEM768-X25519, HKDF-SHA256, ChaCha20Poly1305
       A.5.1.  Base Setup Information
     A.6.  MLKEM1024-P384, HKDF-SHA384, AES-256-GCM
       A.6.1.  Base Setup Information
     A.7.  DHKEM(P-256, HKDF-SHA256), SHAKE256, AES-128-GCM
       A.7.1.  Base Setup Information
     A.8.  DHKEM(P-384, HKDF-SHA384), Unknown KDF, AES-256-GCM
       A.8.1.  Base Setup Information
     A.9.  DHKEM(X25519, HKDF-SHA256), Unknown KDF, ChaCha20Poly1305
       A.9.1.  Base Setup Information
     A.10. DHKEM(X448, HKDF-SHA512), Unknown KDF, ChaCha20Poly1305
       A.10.1.  Base Setup Information
     A.11. MLKEM768-P256, SHAKE256, AES-256-GCM
       A.11.1.  Base Setup Information
     A.12. MLKEM768-X25519, Unknown KDF, ChaCha20Poly1305
       A.12.1.  Base Setup Information
     A.13. ML-KEM-1024, Unknown KDF, AES-128-GCM
       A.13.1.  Base Setup Information
   Authors' Addresses

1.  Introduction

   A cryptographically relevant quantum computer may or may not exist as
   of this writing.  The conventional wisdom, however, is that if one
   does not already, then it likely will within the lifetime of
   information that is cryptographically protected today.  Such a
   computer would have the ability to infer decapsulation keys from
   encapsulation keys used for traditional KEMs, e.g., KEMs based on
   Diffie-Hellman over finite fields or elliptic curves.  And it would
   be able to do this not just for data encrypted after the creation of
   the computer, but also for any information observed by the attacker
   previously, and stored for later decryption.  This is the so-called
   "harvest now, decrypt later" attack.

   It is thus a high priority for many organizations right now to
   migrate key exchange technologies to use "post-quantum" (PQ)
   algorithms, which are resistant to attack by a quantum computer
   [PQCE].  Since these PQ algorithms are relatively new, there is also
   interest in hybrid constructions combining PQ algorithms with
   traditional KEMs, so that if the PQ algorithm fails, then the
   traditional algorithm will still provide security, at least against
   classical attacks.

   Hybrid Public Key Encryption (HPKE) is a widely-used public key
   encryption scheme based on combining a Key Encapsulation Mechanism
   (KEM), a Key Derivation Function (KDF), and an Authenticated
   Encryption with Associated Data (AEAD) scheme [HPKE].  It is the
   foundation of the Messaging Layer Security (MLS) protocol, the
   Oblivious HTTP protocol, and the TLS Encrypted ClientHello extension
   [RFC9420] [RFC9458] [TLS-ECH].

   This document defines a collection of PQ and post-quantum/traditional
   (PQ/T) KEM algorithms for HPKE, which allows HPKE to provide post-
   quantum security, as discussed in Section 7:

   *  ML-KEM-512

   *  ML-KEM-768

   *  ML-KEM-1024

   *  X25519 + ML-KEM-768

   *  P-256 + ML-KEM-768

   *  P-384 + ML-KEM-1024

   ML-KEM, X25519, and P-256/P-384 are defined in [FIPS203], [RFC7748],
   and [FIPS186], respectively.

   This selection of KEM algorithms was chosen to provide a reasonably
   consolidated set of algorithms (in the interest of broad
   interoperability), while still allowing HPKE users flexibility along
   a few axes:

   *  Pure PQ vs. PQ/T hybrid

   *  CFRG-defined vs. NIST-defined elliptic curves

   *  Different security levels (NIST category 3 vs. category 5)

   We also define HPKE KDF algorithms based on the SHA-3 family of hash
   functions.  SHA-3 is used internally to ML-KEM, and so it could be
   convenient for HPKE users using the KEM algorithms in this document
   to rely solely on SHA-3.

2.  Conventions and Definitions

   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
   "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and
   "OPTIONAL" in this document are to be interpreted as described in
   BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all
   capitals, as shown here.

   We generally use the terminology defined in the HPKE specification
   [HPKE].

   There are two meanings of "hybrid" in this document.  In the context
   of "hybrid public key encryption", it refers to the combination of an
   asymmetric KEM operation and a symmetric AEAD operation.  In the
   context of "PQ/T hybrid", refers to the combination of PQ and
   traditional KEMs.  For clarity, we always use "HPKE" for the former,
   and "PQ/T hybrid" for the latter.

3.  ML-KEM

   The NIST Module-Lattice-Based Key-Encapsulation Mechanism is defined
   in [FIPS203].  In this section, we define how to implement the HPKE
   KEM interface using ML-KEM.

   The HPKE DeriveKeyPair function uses the SHAKE256 KDF (see Section 5)
   to derive an ML-KEM decapsulation key in the 64-byte seed format,
   then uses the function ML-KEM.KeyGen_internal from [FIPS203] to
   compute the corresponding encapsulation key.

   def expandDecapsKey(dk):
       d = dk[:32]
       z = dk[32:]
       (ek, expanded_dk) = ML-KEM.KeyGen_internal(d, z)
       return (expanded_dk, ek)

   def DeriveKeyPair(ikm):
       dk = SHAKE256.LabeledDerive(ikm, "DeriveKeyPair", "", 64)
       (_expanded_dk, ek) = expandDecapsKey(dk)
       return (dk, ek)

   As discussed in [HPKE], the value of suite_id used within
   LabeledDerive identifies the KEM in use:

   *  ML-KEM-512: KEM\x00\x40 (hex: 4b454d0040)

   *  ML-KEM-768: KEM\x00\x41 (hex: 4b454d0041)

   *  ML-KEM-1024: KEM\x00\x42 (hex: 4b454d0042)

   The GenerateKeyPair function simply calls ML-KEM.KeyGen_internal with
   a pseudorandom dk value.  As long as the bytes supplied by random
   meet the randomness requirements of [FIPS203], this corresponds to
   the ML-KEM.KeyGen function, with the distinction that the
   decapsulation key is returned in seed format rather than the expanded
   form returned by ML-KEM.KeyGen.

   def GenerateKeyPair():
       dk = random(64)
       (_expanded_dk, ek) = expandDecapsKey(dk)
       return (dk, ek)

   The SerializePublicKey, DeserializePublicKey, SerializePrivateKey,
   and DeserializePrivateKey functions are both the identity function,
   since the ML-KEM already uses fixed-length byte strings for public
   encapsulation keys.  The length of the byte string is determined by
   the ML-KEM parameter set in use.

   The Encap function corresponds to the function ML-KEM.Encaps in
   [FIPS203], where an ML-KEM encapsulation key check failure causes an
   HPKE EncapError.

   The Decap function corresponds to the function ML-KEM.Decaps in
   [FIPS203], where any of an ML-KEM ciphertext check failure,
   decapsulation key check failure, or hash check failure causes an HPKE
   DecapError.  To be explicit, we derive the expanded decapsulation key
   from the 64-byte seed format and invoke ML-KEM.Decaps with it:

   def Decap(enc, skR):
       (expanded_dk, _ek) = expandDecapsKey(skR)
       return ML-KEM.Decaps(expanded_dk, enc)

   The constants Nsecret and Nsk are always 32 and 64, respectively.
   The constants Nenc and Npk depend on the ML-KEM parameter set in use;
   they are specified in Table 2.

      |  Note: While this document defines an HPKE KEM for ML-KEM-512 in
      |  the interest of completeness, implementors should generally
      |  prefer ML-KEM-768 or ML-KEM-1024, or the PQ/T hybrids described
      |  in Section 4.  According to current cryptanalysis, ML-KEM-512
      |  provides security compatible with a 128-bit security level (or
      |  NIST security category 1).  Given the relative novelty of ML-
      |  KEM, however, there is some concern that new cryptanalysis
      |  might reduce the security level of ML-KEM-512.  Use of ML-
      |  KEM-768 or ML-KEM-1024 acts as a hedge against cryptanalysis of
      |  ML-KEM that removes some bits of security but is not
      |  catastrophic, at a modest performance penalty.

4.  Hybrid KEMs with ECDH and ML-KEM

   [CONCRETE] defines a collection of concrete PQ/T hybrid KEMs.  These
   KEMs combine ML-KEM with a traditional ECDH group:

   MLKEM768-P256:  ML-KEM-768 and P-256
   MLKEM768-X25519:  ML-KEM-768 and X25519
   MLKEM1024-P384:  ML-KEM-1024 and P-384

   These KEMs satisfy the KEM interface defined in [GENERIC].  This
   interface maps to the KEM interface in [HPKE] in the following way:

   *  The HPKE DeriveKeyPair function uses the SHAKE256 KDF (see
      Section 5) to derive a 32-byte seed for the hybrid KEM, then uses
      the function DeriveKeyPair from [GENERIC] to compute the key pair
      for the hybrid KEM.  The input to this function SHOULD be at least
      32 bytes long.

   def DeriveKeyPair(ikm):
       seed = SHAKE256.LabeledDerive(ikm, "DeriveKeyPair", "", 32)
       return KEM.DeriveKeyPair(seed)

   *  The GenerateKeyPair, Encap, and Decap algorithms are identical.

   *  The SerializePublicKey, DeserializePublicKey, SerializePrivateKey,
      and DeserializePrivateKey algorithms are the identity, since
      encapsulation and decapsulation keys are already fixed-length byte
      strings.

   *  The constants map as follows:

      -  Nsecret = Nss

      -  Nenc = Nct

      -  Npk = Nek

      -  Nsk = Ndk

   As discussed in [HPKE], the value of suite_id used within
   LabeledDerive identifies the KEM in use:

   *  MLKEM768-P256: KEM\x00\x50 (hex: 4b454d0050)

   *  MLKEM768-X25519: KEM\x64\x7a (hex: 4b454d647a)

   *  MLKEM1024-P384: KEM\x00\x51 (hex: 4b454d0051)

5.  Single-Stage KDFs

   This section defines HPKE KDFs for eXtendable Output Functions (XOF)
   based on Keccak.  SHAKE is defined as part of the SHA-3 specification
   [FIPS202].  The related TurboSHAKE XOFs are defined in
   [I-D.irtf-cfrg-kangarootwelve].

   The Derive() function for SHAKE is as follows, where <SIZE> is either
   128 or 256:

   def SHAKE<SIZE>.Derive(ikm, L):
       return SHAKE<SIZE>(M = ikm, d = 8*L)

   The Derive() function for TurboSHAKE is as follows, where <SIZE> is
   either 128 or 256:

   def TurboSHAKE<SIZE>.Derive(ikm, L):
       return TurboSHAKE<SIZE>(M = ikm, D = 0x1f, L)

   The Nh values for the KDFs defined in this section are listed in
   Table 1.

          +========+===============+====+===========+===========+
          | Value  | KDF           | Nh | Two-Stage | Reference |
          +========+===============+====+===========+===========+
          | 0x0010 | SHAKE128      | 32 | N         | RFC XXXX  |
          +--------+---------------+----+-----------+-----------+
          | 0x0011 | SHAKE256      | 64 | N         | RFC XXXX  |
          +--------+---------------+----+-----------+-----------+
          | 0x0012 | TurboSHAKE128 | 32 | N         | RFC XXXX  |
          +--------+---------------+----+-----------+-----------+
          | 0x0013 | TurboSHAKE256 | 64 | N         | RFC XXXX  |
          +--------+---------------+----+-----------+-----------+

                       Table 1: Single-Stage KDF IDs

   [[ RFC EDITOR: Please change "XXXX" above to the RFC number assigned
   to this document. ]]

6.  Selection of AEAD Algorithms

   As discussed in Section 2.1 of [PQCE], the advent of quantum
   computers does not necessarily require changes in the AEAD algorithms
   used in HPKE.  However, some compliance regimes call for the use of
   AEAD algorithms with longer key lengths, for example, the AES-256-GCM
   or ChaCha20Poly1305 algorithms registered for HPKE instead of AES-
   128-GCM.

7.  Security Considerations

   As discussed in the HPKE Security Considerations, HPKE is an IND-CCA2
   secure public-key encryption scheme if the KEM it uses is IND-CCA
   secure.  It follows that HPKE is IND-CCA2 secure against a quantum
   attacker if it uses a KEM that provides IND-CCA security against a
   quantum attacker, i.e., a PQ KEM.  The KEM algorithms defined in this
   document provide this level of security.  ML-KEM itself is IND-CCA
   secure, and the IND-CCA security of the hybrid constructions used in
   this document is established in [CONCRETE].

   Another security property that is salient in some use cases is "key
   binding".  In [CDM23], these notions are referred to with the
   shorthand X-BIND-P-Q.  The most salient for protocol design provide
   assurances similar to those provided by transcript hashing in
   protocols like TLS:

   LEAK-BIND-K-PK:  If the sender and receiver have the same key (K,
      shared_secret above), then there is only one encapsulation key
      (PK, pk) that could have produced it, even if the decapsulation
      key is leaked to an attacker after the encryption has been done.

   LEAK-BIND-K-CT:  If the sender and receiver have the same key (K,
      shared_secret above), then there is only one KEM ciphertext (CT,
      enc) that could have produced it, even if the decapsulation key is
      leaked to an attacker after the encryption has been done.

   DHKEM and ML-KEM meet these properties, as shown in [CDM23].  The
   hybrid KEMs used in this document also provide these properties, as
   discussed in [GENERIC].

7.1.  PQ Hybrid vs. Pure PQ

   Assuming that ML-KEM is secure, either the PQ/T hybrid KEMs defined
   in Section 4 or the pure PQ KEMs defined in Section 3 provide
   security against a quantum attacker.  Hybrid KEMs can be used to
   provide security against a non-quantum attacker in the event of
   failures with regard to the PQ algorithm, including both
   implementation flaws as well as new cryptanalysis.  See [GENERIC] for
   further analysis of hybrid security properties.

7.2.  Asymmetric-Key-Authenticated Modes of RFC9180

   In the [RFC9180] version of HPKE, KEMs could optionally define the
   additional functions AuthEncap and AuthDecap.  These functions
   allowed a sender to authenticate the message to the recipient without
   interaction.

   The KEMs defined in this document do not support AuthEncap/AuthDecap
   and cannot be used to migrate uses of HPKE that rely on this mode.
   PSK-authenticated HPKE (Section 5.1.2 of [HPKE]) or digital
   signatures may be suitable alternatives.

8.  IANA Considerations

   This section requests that IANA perform three actions:

   1.  Update the entries in HPKE KEM Identifiers registry corresponding
       to ML-KEM algorithms.

   2.  Add entries to the HPKE KEM Identifiers registry for the PQ/T
       hybrid KEMs defined in this document.

   3.  Add entries to the HPKE KDF Identifiers registry for the SHA-3
       KDFs defined in this document.

8.1.  Updated ML-KEM KEM Entries

   IANA is requested to replace the entries in the HPKE KEM Identifiers
   registry for values 0x0040, 0x0041, and 0x0042 with the following
   values:

    +========+=============+=========+====+====+===+======+===========+
    | Value  | KEM         | Nsecret |Nenc|Npk |Nsk| Auth | Reference |
    +========+=============+=========+====+====+===+======+===========+
    | 0x0040 | ML-KEM-512  | 32      |768 |800 |64 | no   | RFCXXXX   |
    +--------+-------------+---------+----+----+---+------+-----------+
    | 0x0041 | ML-KEM-768  | 32      |1088|1184|64 | no   | RFCXXXX   |
    +--------+-------------+---------+----+----+---+------+-----------+
    | 0x0042 | ML-KEM-1024 | 32      |1568|1568|64 | no   | RFCXXXX   |
    +--------+-------------+---------+----+----+---+------+-----------+

     Table 2: Updated ML-KEM entries for the HPKE KEM Identifiers table

   The only change being made is to update the "Reference" column to
   refer to this document.

8.2.  PQ/T Hybrid KEM Entries

   IANA is requested to replace the entry for the value 0x647a and add
   two entries for values 0x0050 and 0x0051 with the following values:

    +======+=================+=========+====+====+===+====+===========+
    |Value | KEM             | Nsecret |Nenc|Npk |Nsk|Auth| Reference |
    +======+=================+=========+====+====+===+====+===========+
    |0x0050| MLKEM768-P256   | 32      |1153|1249|32 |no  | RFCXXXX   |
    +------+-----------------+---------+----+----+---+----+-----------+
    |0x0051| MLKEM1024-P384  | 32      |1665|1665|32 |no  | RFCXXXX   |
    +------+-----------------+---------+----+----+---+----+-----------+
    |0x647a| MLKEM768-X25519 | 32      |1120|1216|32 |no  | RFCXXXX   |
    +------+-----------------+---------+----+----+---+----+-----------+

      Table 3: PQ/T hybrid entries for the HPKE KEM Identifiers table

8.3.  SHA-3 KDF Entries

   IANA is requested to add the values listed in Table 1 to the HPKE KDF
   Identifiers registry.

9.  References

9.1.  Normative References

   [CONCRETE] Connolly, D. and R. Barnes, "Concrete Hybrid PQ/T Key
              Encapsulation Mechanisms", Work in Progress, Internet-
              Draft, draft-irtf-cfrg-concrete-hybrid-kems-02, 6 November
              2025, <https://datatracker.ietf.org/doc/html/draft-irtf-
              cfrg-concrete-hybrid-kems-02>.

   [FIPS186]  "Digital Signature Standard (DSS)", National Institute of
              Standards and Technology (U.S.),
              DOI 10.6028/nist.fips.186-5, February 2023,
              <https://doi.org/10.6028/nist.fips.186-5>.

   [FIPS202]  "SHA-3 standard :: permutation-based hash and extendable-
              output functions", National Institute of Standards and
              Technology (U.S.), DOI 10.6028/nist.fips.202, 2015,
              <https://doi.org/10.6028/nist.fips.202>.

   [FIPS203]  "Module-lattice-based key-encapsulation mechanism
              standard", National Institute of Standards and Technology
              (U.S.), DOI 10.6028/nist.fips.203, August 2024,
              <https://doi.org/10.6028/nist.fips.203>.

   [GENERIC]  Connolly, D., Barnes, R., and P. Grubbs, "Hybrid PQ/T Key
              Encapsulation Mechanisms", Work in Progress, Internet-
              Draft, draft-irtf-cfrg-hybrid-kems-07, 20 October 2025,
              <https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-
              hybrid-kems-07>.

   [HPKE]     Barnes, R., Bhargavan, K., Lipp, B., and C. A. Wood,
              "Hybrid Public Key Encryption", Work in Progress,
              Internet-Draft, draft-ietf-hpke-hpke-02, 4 November 2025,
              <https://datatracker.ietf.org/doc/html/draft-ietf-hpke-
              hpke-02>.

   [I-D.irtf-cfrg-kangarootwelve]
              Viguier, B., Wong, D., Van Assche, G., Dang, Q., and J.
              Daemen, "KangarooTwelve and TurboSHAKE", Work in Progress,
              Internet-Draft, draft-irtf-cfrg-kangarootwelve-17, 21
              February 2025, <https://datatracker.ietf.org/doc/html/
              draft-irtf-cfrg-kangarootwelve-17>.

   [RFC2119]  Bradner, S., "Key words for use in RFCs to Indicate
              Requirement Levels", BCP 14, RFC 2119,
              DOI 10.17487/RFC2119, March 1997,
              <https://www.rfc-editor.org/rfc/rfc2119>.

   [RFC7748]  Langley, A., Hamburg, M., and S. Turner, "Elliptic Curves
              for Security", RFC 7748, DOI 10.17487/RFC7748, January
              2016, <https://www.rfc-editor.org/rfc/rfc7748>.

   [RFC8174]  Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC
              2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174,
              May 2017, <https://www.rfc-editor.org/rfc/rfc8174>.

9.2.  Informative References

   [CDM23]    Cremers, C., Dax, A., and N. Medinger, "Keeping Up with
              the KEMs: Stronger Security Notions for KEMs and automated
              analysis of KEM-based protocols", 2023,
              <https://eprint.iacr.org/2023/1933.pdf>.

   [PQCE]     Banerjee, A., Reddy.K, T., Schoinianakis, D., Hollebeek,
              T., and M. Ounsworth, "Post-Quantum Cryptography for
              Engineers", Work in Progress, Internet-Draft, draft-ietf-
              pquip-pqc-engineers-14, 25 August 2025,
              <https://datatracker.ietf.org/doc/html/draft-ietf-pquip-
              pqc-engineers-14>.

   [RFC9180]  Barnes, R., Bhargavan, K., Lipp, B., and C. Wood, "Hybrid
              Public Key Encryption", RFC 9180, DOI 10.17487/RFC9180,
              February 2022, <https://www.rfc-editor.org/rfc/rfc9180>.

   [RFC9420]  Barnes, R., Beurdouche, B., Robert, R., Millican, J.,
              Omara, E., and K. Cohn-Gordon, "The Messaging Layer
              Security (MLS) Protocol", RFC 9420, DOI 10.17487/RFC9420,
              July 2023, <https://www.rfc-editor.org/rfc/rfc9420>.

   [RFC9458]  Thomson, M. and C. A. Wood, "Oblivious HTTP", RFC 9458,
              DOI 10.17487/RFC9458, January 2024,
              <https://www.rfc-editor.org/rfc/rfc9458>.

   [TestVectors]
              "HPKE Test Vectors for Post-Quantum Algorithms", 2025,
              <https://github.com/hpkewg/hpke-pq/blob/main/test-
              vectors.json>.

   [TLS-ECH]  Rescorla, E., Oku, K., Sullivan, N., and C. A. Wood, "TLS
              Encrypted Client Hello", Work in Progress, Internet-Draft,
              draft-ietf-tls-esni-25, 14 June 2025,
              <https://datatracker.ietf.org/doc/html/draft-ietf-tls-
              esni-25>.

Appendix A.  Test Vectors

   Each section below contains test vectors for a single selection of
   HPKE algorithms and contains the following values:

   1.  Configuration information and private key material: This includes
       the mode, info string, HPKE ciphersuite identifiers (kem_id,
       kdf_id, aead_id), and all sender and recipient key material.  For
       each role S or R, (sender and recipient, respectively) key pairs
       are generated as (skX, pkX) = DeriveKeyPair(ikmX).  Each key pair
       (skX, pkX) is written in its serialized form, where skXm =
       SerializePrivateKey(skX) and pkXm = SerializePublicKey(pkX).  For
       the PSK mode, the shared PSK and PSK identifier are also
       included.

   2.  Context creation intermediate values: This includes the KEM
       outputs enc and shared_secret used to create the context, as well
       as the context values key, base_nonce, and exporter_secret.

   3.  Encryption test vectors: A fixed plaintext message is encrypted
       using different sequence numbers and AAD values using the context
       computed in (2).  Each test vector lists the sequence number and
       corresponding nonce computed with base_nonce, the plaintext
       message pt, AAD aad, and output ciphertext ct.

   4.  Export test vectors: Several exported values of the same length
       with differing context parameters are computed using the context
       computed in (2).  Each test vector lists the exporter_context,
       output length L, and resulting export value.

   These test vectors are also available in JSON format at
   [TestVectors].

A.1.  ML-KEM-512, HKDF-SHA256, AES-128-GCM

A.1.1.  Base Setup Information

  mode: 0
  kem_id: 64
  kdf_id: 1
  aead_id: 1
  info: 3466363436353230366636653230363132303437373236353633363936313665
        3230353537323665
  ikmR: 1e3b1d6d1ce340c7fa402d6c3dabf8db8842429714abb88235701cef640629b8
        0a8f68e5fd56cc470ab718539c93bf35f361bdd35d9d65c2e277ef967fe467e8
  pkRm: 8eac7c8b5ca25cbbc076fc1413a6110db16959041ddfa05fb3723a238ab1ac2a
        83b87b2979278293133c46e645d7e580bb6b44c8a1ba0089b9c2c44e25ca0100
        533b3e273fb4617f63341fbc00aa455bc7cc31ad4e22abcdf22bab319d187b83
        5d64858db7668f45babf348258407e56d8714eb6344947185d824d6e1ba4746a
        a371889d625338d9199a3bc105adeb7f61290fda304f872c8e4106a8e3c38640
        11202ae9664cc590b44c55aefc4400379215210d28080effe9a88cc46c5e6337
        ffac99eec23fa1ab7bf8c26092db95d3ec449d422bdf410f8e5773cf836745b0
        74b71044056b3b25b341139b9beb90bf64a2b7990b6d5b06a493b056d1e48156
        6ccd98082ce5d022bb7a4ebddc87f5f921736661771c4e0617a9f8d1be2738be
        a8f57b1f3ba8c552ce5657725d539dcf4bc4814008ed05c052a0b848c994b43a
        69c0da278fd951e9e817ab39908fd95972973d0d033cd8e694dd12513a045886
        e5b892b76ef6387ad8801cb8b5c9fc7c1fc66a2ab845c5eca21e85b06e749cab
        30161efcc20c5a64426fc966fbca757a088effd1ca7c4134cad87c4e03a528bc
        303d3c08697916a5174ea87bbcefe6c2790213fd9a354d0609d03118345c99ae
        3ccc8a3c395dd8198c5c51b37ba959822fac0250cc981f9b46118b09c8bf5c77
        eb5768c8d9bc05070fa16668beba956ca4af56d7caebd7140a20a11a7c22a5d2
        7c58e656221bad27064c3112914bd55bcfd052788c7416f53de45308bfa37270
        b43223b7b2e67c1fdee7b11f2520b35c04533c127df47c0a90b3dd094e072863
        2fa109416cbd4fdcb9958b3b6cb3517e06698db47c5f037d0cd0b6d9847a56f0
        5ba213b211b5101654458f76c91d2b916012cb15594759e9593794ad26c804f5
        98675266984ddbb9fd44768c923916e26d8e696c10251a414c61e71613e2a904
        6c612cc593c62f716a9828cba5a7777ea6b961e86bc0093ee9683956e4a2c115
        a14cf6bb7d771f19594f45d578c808748b78bd0412c7b12ab80e923b368b6c97
        8436c783a392f65f42967ac1f80753a6ad38b16db644879c4a6dc613818e7393
        97903c409c2a38e303d6d87e098391f558e28c7f982b48b9700904cba6fd3855
  skRm: ba0f0c4af2328dc89ec354c6b59c3714626773daf08f2d7e249309d9c331cc0f
        055b007c6947d28bfc52cc1e6af7086cd5db100a8147a4857615a4cd1e83ca63
  enc: 602149195315a9350529c1cba669db47f58c20275cebc68f9968f3e5bcfd67038
       e1096f47aeb4029656b7c8288fd85d734ec73f827bcd5f9f14ffc403e84135ba8
       032a4f002c5e38028a6d7aca106d4b0697e4706eddfaa5beee9e0030136cbf7a4
       87d74ea90d419bb65a329f83ac496e85a45080eafba06a536a259bbca49dc5d26
       98e86d8901ed97e8919c58bdaa3a34430acbc0acdefa97fbb5667c58c1f1958b3
       0a411647bf42ffc056c1718acce047f67f036075e5181135f6a4341e03d3b503d
       de15e1678f8b167519763055f3339466b9a310410c7eb5356b7b76fe7a38364c0
       e8c17fe0ec2e431e41b143794a5b2999e70d42bde653b43360c939392b088758e
       c2a87c4b08ba85ad951dcdd4dbcfe2f7011695c877a7736ac31fc85e208c09743
       84936d7b64e455355897025f40c049781456e814cc2da189e6a2f6c99f5d3f20f
       a9039e4b1f62d4899c2d82b449bda4a2239b6e7a6e802f5ae9bc5c882078abfb5
       088a5b4b727f9d1b4b2045c1c6b4de122b68f3e27cba0d39c2dbb44b26f60c7b5
       afa52166585f0f5d656a299ee82ae42a9a31a1ab3d387c53c0c639586740e3753
       cbe723156b5a5a472da0337fa26eb4651791bf653dd33d7c62a69686cdac505b5
       703c2a8b41640a01893a1b1792e9c9351bbd5a6768505cd74dad62570a24b6d6d
       e277657ea700905ac28c03f18961fcd0da4c57df37254868e58c92cb1ae7ef90d
       b8b92c25734ae5a9941cccc50ebe5e608c6ec254bda7635e45fb2c65008bb68b5
       9a066caee2b91f83b28ef0111f7998046e54c731b7c55837e98161ccaa25a2e80
       61da0fdded26ea68665f03da247991325ccd3cc1e7c92effc8d4228c1e7db2c0b
       d2086b336ac6773bf9de5e07052d39db319c84f08972f101d87c440431d910d14
       2ec44ae5b6b7fe18f57d58cae9ab63f9dc0b7c1e42bd02d22fc87d0096908138e
       15c7414aae4ed049dda42a7c49b39d5b958c225941069e2bc9ef5ae35e3b918cf
       9a6702c76be5476a4ac07c38ffa55ab6ae4c927a063e5b7f71dafae3aad28ce31
       a92b2cfde8212f047da47e1175e81addde6a9a1ab
  shared_secret: 2fc9533e0ba8e59f0753280bc099674320bae39a0d4f817b6271789
                 b2f4aef33
  key: 1c70cc9e7fd0247c168ca60a571b94bd
  base_nonce: 388be5ab975de38b6b63492e
  exporter_secret: 51885fdc6e31c3628f35b26fcfbc232d904d7f4b6e22e6ede588c
                   6e0aad60f90

A.1.1.1.  Encryptions

  sequence number: 0
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d30
  nonce: 388be5ab975de38b6b63492e
  ct: 7b2cbf3267568e7658d5f142438a320203d93dcc4da7c35cc6160cd3155d27476e
      84b45c97b8e99b4a4fdde2a4646f0fe22c126d95671b1eb02841aa6171843f9019
      56d704ac203c16bb

  sequence number: 1
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d31
  nonce: 388be5ab975de38b6b63492f
  ct: 4fa580ef1a1e04b215025d5f2e484de4a46ccb4058f9c1f6bf510d28608cd9f75f
      5a01b033fb7800d4bad1fe9e08f75bdea91e1987dd645b51e4ad0c8e9ffc2a8563
      fbe09eb415a9e3f0

  sequence number: 2
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d32
  nonce: 388be5ab975de38b6b63492c
  ct: 391022ddca55bb7d752fea753c42137f150757a4e3ff63a7ab9a46b763c7767dd2
      7819e80a6d22b9edf9df0074ce13a75cc6cafc386f11e31c53e51881e7aef511d1
      7b3f67377bb69c6e

  sequence number: 3
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d33
  nonce: 388be5ab975de38b6b63492d
  ct: 5c5e1bab076151db3a9552b29f6be3a8108537f3874521cf3f141b2088bdfdf8d1
      36b7b5ea868ce778169b0ddefd1bbb5d8d548fb359deac79835620f3446c08a474
      4d145026f977a23b

  sequence number: 4
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d34
  nonce: 388be5ab975de38b6b63492a
  ct: f0463c8994eaadbb949bf601ca8e698f01a6030dc6b9f0e4e88c8707b1e89ed16d
      6d55b04908cb0dc4827946d449fe438b28d1e90ede4c072ff31698bfce8d54d097
      5e264d52e84f7346

  sequence number: 5
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d35
  nonce: 388be5ab975de38b6b63492b
  ct: 44fed22a38864e1fc9287ebf7ce113929b8da044c541c135a9f330027c5fababde
      a4e586635a6a005c51397e609f10a98799bd73726559a1f6d9b6ff77b05b6eaa22
      75942e965e46b7d5

  sequence number: 6
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d36
  nonce: 388be5ab975de38b6b634928
  ct: 6e7cce46c77a79bbfdf63b9997a0e3980daf4e315358a40ced6019adb0d6e7d368
      430a4f7a9fd0ecac24bfebd6b46fdd8655961e62bd873d32d4a55b5ab46eee8d20
      1e62754d933f5e5f

  sequence number: 7
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d37
  nonce: 388be5ab975de38b6b634929
  ct: 82c186b67aaa9ae4de7e4212e94d3f2b2777215a797f933c0f5d30781145b02544
      d07eafa09242e84cc8ec0917ff034d96cb08d903eb4a34441753cc849bc949d773
      c7399af0cd9e75ae

  sequence number: 8
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d38
  nonce: 388be5ab975de38b6b634926
  ct: b353fa2e5f0c7f4a2d9dd93dc3f3c2803c435364f583702622693a5524697c70b1
      910153616fa9340a19f967c2da4bd68f4cf358e9e38d6a527ed82ff620146f6e9e
      3c3c6621b7c76951

  sequence number: 9
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d39
  nonce: 388be5ab975de38b6b634927
  ct: eea203f1dbffb1469fab12dc04aa58b2af27e7020497c2f37f932cc8407cda1186
      eabda9163f8301d36830a7165ff35fcbeb431cd2781aba131dd1f84f80b3eb7759
      8a9bbe71012d9750

A.1.1.2.  Exported Values

  exporter_context: 70736575646f72616e646f6d30
  L: 32
  exported_value: 9a6166b51568ad9c72f80a718dff2b6bb3894b7b5dcac4c2323d1f
                  be1c8e80f8

  exporter_context: 70736575646f72616e646f6d31
  L: 32
  exported_value: 941652eaf3a06b4300f89840b3bb3f85364870313875b10c2a1a08
                  4672ba0940

  exporter_context: 70736575646f72616e646f6d32
  L: 32
  exported_value: a455a11c021def4aa9d6e287246f0aa2b4697e83ba6d89b530f156
                  eb35db147f

  exporter_context: 70736575646f72616e646f6d33
  L: 32
  exported_value: 29e17489149c6718945dea94f8b0b209384d1bbd81a4e9a3475c79
                  5858a1cbd9

  exporter_context: 70736575646f72616e646f6d34
  L: 32
  exported_value: 43bc54430d1a9d9d9e0dd6075a5206ee633db6af96c0243a71f9c7
                  95f0170fe5

A.2.  ML-KEM-768, HKDF-SHA256, AES-128-GCM

A.2.1.  Base Setup Information

  mode: 0
  kem_id: 65
  kdf_id: 1
  aead_id: 1
  info: 3466363436353230366636653230363132303437373236353633363936313665
        3230353537323665
  ikmR: 16835630bb0fbe89f7a5605bd673559f4a665773fd52aec4ea0cd4e7509e112e
        e5f9bbc75753ec5e86665343136139d2e8676ccd973ccf3114732dbae7445cf0
  pkRm: a1b148974799dc3042a014273479423033ceb9716d732a5b1a661ff5297c0d3a
        75cc04410a1b75ce70c2b886939ae604320bb06767984f519ac0753fb3b24c1d
        41aebd7636b9c8343367788ab742c6428c036b11fb118a27f1022f5b5e7e14b1
        fb7634270b9d2d42c226c513af2701422b1d103237279025809a0244c90f3ac2
        95eab9c35de3ca5d235754b0cd3ed59119e21805f48316877a735bb110f77730
        019d6682889cb649fb099be1269884f13ca7586aa9465c91621906549de239ad
        db0bc740798b990763e8636027f94a3b6813ff511fed9c5717e15901d2a788fa
        ac1197c3f8d1b821da8c392497f5250de1b12f5800cfda207d438a6b85560d3c
        2c7dfdf2661a986569d67261e403bd937a89d36ae7bbc78089871d2422f3c255
        94016fc6dccfb47794a221074fa473c326cf2436b389d788c121042ac16ec321
        1dc3c289cb48a49ebb9848682f171b332f9b5ebff373e5033d9754b77903ad30
        13312900b98feb190162108214b3900c9ef41acab13a1505d021d622893b1baa
        93323e16008b3445af21087ea0765d8cd814405396d935265a974a39b91f93e3
        1d0348865eb7979f1452e59751b1c97476f88d262187f3203531793d6d035091
        214467d022cd879a4c566e61d3b4c825828e03677d234e7980c8de4a0a5e9488
        82e826c8d10cb2d49b2aacc05360798ef0abe47680a4d806c53acf0f2092e234
        67def40a7103611b887306774c442767cdc4be59e98509e2be4bc1bb2f175fef
        a186f2b39a66f1a96e11504d798d026947c9cac13bf3c330f52cf8837c3f3400
        01e11849bc3024a99481f3477fdc6d1734095195189510100672b90b68868bd6
        5b01a51c0df279e9bc94c414acbb2a8ca4745096ac5355fc6457f22935d52232
        d69559a3cfd6ca6349731e5f65594b44364854a6fc6705236c836391663d4328
        cbc47e7ff5a97b69707b842aac9091c613c744b53539ba5c514a40cddc788074
        8a7e1816ac8581e239244f3525ab63758d2030d44a7bb9a9ab4a403c9930c8d5
        e755816c20c1ec0e59741887086910a7030192243c9195bf9a9c9f5580bf4049
        11c059f4c1b70644c892f420d1411920dc710920b9fbbc2204523b962c5d8612
        9f91d7c464f989ffc2a8801ba19694755f494065f0669b2751f864643bac568b
        a848a12abfa15b295d177bd7b87332585c0aec3899f8442ef04e0a4b15b19c50
        6ef8bb84b641e3b8c6199cc352f08316a9322a4a7969472dc1b130fed40e6141
        b019454c04cc00c2491e680017a892a38f33567880c586231a495063cad436ea
        8118474278bcc5adf6e0be18622193b58757f291f660ba459c98f3d19e2eb372
        cb43268a82ab855845bdf5b264a4b93a688beac81201e8484eb48ba6a908a90b
        b9e0c038d70775921a9c021caaf313cb31f2bbf4a71effc3ca8f378d80b4abd7
        39bde0d4a8c6679184db9828f531ae63a399869ecba99e435c4d36837a0f29ce
        020426254157d00acfe6720165a4c6e44a434456ba606c323701a398b8384585
        c694cc9e8475a346529c94389b654778fd2392ee13b5610a925a520513345eda
        13955065a949d3ab4a35b65968c2a8e15389a533a8f6a88960780eeb074db08b
        ec75dd725c35f95ad3ffacc0f93f6ed4593e6b99f27856d5f757300f81845476
  skRm: 3530176644619eb968895c1a251e8568e063278a7d9f4314b7d0ad973be2fd0b
        9560e77a2ca3f07958d782cab43cbae46e16bbc90277545d333e11ddcf18df61
  enc: f208b05a0a31e7bfa386471789e63ed19c037306acd4f46fa22638a9bdd8727e9
       5da7fcbc96e48c3c6dc056cd8305a00a5bca8a1e93a0afe2e95a96f5e11ebd5aa
       a6403ceabb03f7e570fdc330551d573db8e20ef9da74c43f01e3e608086c4127b
       9a7a21e528167ad147839ea05858f96656551fe18add75ea8c539dacb30727826
       a8548c2fe7cc3cbd265f3b72bc1ecbd4c708a6b42b45e1cd8a9f9703751a1de53
       4ecdc2206e842cc28d2199def060e66ad8cf8c1b4f1bc25529779b70ad2f77863
       4fdb6c644c5d5229059d137a263777270e0926021bda68e0da63ee55b50610de5
       04211501225baf5e4643ef6697bb58a4fa2133f8ceb11081c93a8bc99ba2962bf
       d4e7d37afb09e18ddb094ca6b417dfb663fdfff5fb0aa19acb178fbaa049edab4
       aebb4cd6e82e79c4d7d2a3ebc30f5feb21ac9b69016ae2d86a6b1d04f81833c64
       6a101d7c493a76452519c7a573127e0eb6f2c33e845f0480f288ccaeb8c764bfe
       9616f44f2ab8e2608b758d66b045bc2dab5126edce6cff0ea5b46a8cc9a914f08
       85a8cf661de2031faab4d8fbaff1eb957bc006944cfcd9d2aac2a3f0fd1706e00
       306cf75c17b264342aa7e4d3322383b3e5be0bb0ae9944e8e6c0e35b99857b606
       47a2f508f8c5d5ca1cc99a2809a6e0f53ffdb9b0e38a4ccabd2193dc39fca692d
       52ca9931e69601f3e7e481fbd996818286a28c6234942e303e37f26d61e54f761
       69228f1e1019cd7b8c657cdc9f0e1bfa471a3ca6b7c575fbc95612d7feb7c6f9f
       861377b13293eff6f271556552f79a5dccbc0a9e23f7ac877fc8d17a636d7638b
       c5efb2b178bec0816936d479a59f09d2095a7926af0e957e8cfaf152796ef9b94
       fcfa103b8bc7257137fe6b5a37fd3e7b28db71f48714650bbf12f943ba1299dfb
       94ce797079d9cc2c010c1793da338a2718cea6dfeb774419deeb14271f8e323e5
       e80b9a21a853d3b41f945207cf22f76ed906224e6c213b88182f5c3ef12f38fa9
       756323322cadccc5f12c2ae9f25c9971e0250b3bce5307a6d8e28e215a7199f1d
       6d30eb0390f3c60ce14b32f9a4f64da363173013249d827aa104e42b6036e1587
       73c19858485ef0f4e75936c846299dcefa7103ada6d42808247d66323ae82cb04
       93c8752fbf9e92dd6a7158fdfaf4f1d389cdb3a20c0b98e409282a43537a6eb6d
       fe29afd898f2e5976f8042c166ee0f89b96905245f06bee9ee1ee8110c818d4f0
       1e6b6ccfdf0bccf7814c26c229ef570a9f1da1003fb1ef3aaf5157872c44ba77c
       607635faa93ab8e0bfcd07c881792e313e37c413a94e1179cc1b3ba703835ecc1
       6c46aeac51befe03a0c197c380c55d821071ca3c5ff5b44f1768a1c888bc9f533
       c054f4dccc5ab839b7b366c75f1b232d2e3223336f875f121b5031591e378690e
       ec5fae0c96be8402a2e214bbfb6364922dc66eba8bf128b13df4b2261bcddbdd4
       9ff79f223e5a0c0c68503f30b97f242ca4cfe769a9449188595c3ddca23080f31
       7c638d0508474959d60c06acb6a5e34
  shared_secret: 02a5ae918c2061093153b64a9ab0e7fd0557b83c525ae40b5105445
                 562acf451
  key: 10bb7d2e2caea3dfe5be5b67839a19f8
  base_nonce: 4b26a28723c323f51bfe6e7c
  exporter_secret: e0fad26021e07668d9a455daa43aa39e21fe0fcb46cb479b1c71a
                   44fc4f64cdd

A.2.1.1.  Encryptions

  sequence number: 0
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d30
  nonce: 4b26a28723c323f51bfe6e7c
  ct: f46dae7e4b18a6c14d9d8758d84997e74766bd1f79d59f28e53ee3fd610bbe4616
      ce1da84f186da448a6b9990c9cb7e299cc744d371116da846aa0346adc53474903
      e1ce604e7bbeea8a

  sequence number: 1
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d31
  nonce: 4b26a28723c323f51bfe6e7d
  ct: f0051c99ec402db090087f7ea2de907113234774d2e6c36cff87d4e4ecc46a90e9
      916a5f3e6249b6de2e141b9f49b21f77d0259dc05f3d15045c33a84a9c176796fe
      1cc0cc7a265f9579

  sequence number: 2
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d32
  nonce: 4b26a28723c323f51bfe6e7e
  ct: f5a3b69c1239f0defc082cab5a76f863ae774d58f5d4909780dd9e2be5a87496e1
      48286a114b8ef736144174f91b0fcc4bb1a446a7dc664c0341286c5a560aa1a04b
      4a30f8f9a8859d58

  sequence number: 3
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d33
  nonce: 4b26a28723c323f51bfe6e7f
  ct: ba959f80762a22aaef77d151c31e60c72f7c91668c3e3c7dbd8be6d12636cdcedd
      6e5f604eb1c16abf897a93dd2f4b1a5c8a73301b04da92f341ab0d32ef0af3476a
      352ed020ebbaab28

  sequence number: 4
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d34
  nonce: 4b26a28723c323f51bfe6e78
  ct: cd5c0cae7e2a0eb7c6272b38e6ca4a3ccbca5353959e52de7d8d09bab9cf8faf88
      0141258f756e06d351af8952452027261e7b49e3b814ff9180df85f6c32ada58a7
      cfcfb1f74d85b373

  sequence number: 5
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d35
  nonce: 4b26a28723c323f51bfe6e79
  ct: 70b1f80675614765d12e7568b0c4374a1638eecf9e572c5c47258f1f78ea707538
      740b75ae68a121e4f096e4e4be75f3aae8d93d4017188a08f27d1f43b5b9cdc121
      c2882fa33382e4fc

  sequence number: 6
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d36
  nonce: 4b26a28723c323f51bfe6e7a
  ct: 77977a6a7e4134b98c296665a34be0edcd513c2556fbf2c5e9631183201ec10590
      1e85f52e2474c29d221aeca8eea9db4a22590f3c2504e96b4151e3dbcea71c14d8
      a155bcd97b22c855

  sequence number: 7
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d37
  nonce: 4b26a28723c323f51bfe6e7b
  ct: eb96e1f80a79496fbbe9d5e961e9a725edd09202365240ee310df4e0a222aaf7a3
      b1a0213fdbff5b29baa684d674a2527a7acb8b1e59620146efa5f304e8b5277503
      dc1fb3be9a3f298c

  sequence number: 8
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d38
  nonce: 4b26a28723c323f51bfe6e74
  ct: 2b25c36b321d475d031dbcb640345433ef0e0655c6064b06e65300a5be8de5352a
      eaee7bdfd90862132c206deb2bfb1a8f25ca8abf753367b61f7cf9296e50da0e96
      10898b07938a5879

  sequence number: 9
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d39
  nonce: 4b26a28723c323f51bfe6e75
  ct: 972f3fb949449fbe0343b3d90e3c0c0ff6fca573b5659d7e809c97189984af3f0d
      dad6b96245a1d98e8d210fbdd3c9ad7eae27a0494a651b20d6ccf5ba9759617168
      c08a578db137e9b6

A.2.1.2.  Exported Values

  exporter_context: 70736575646f72616e646f6d30
  L: 32
  exported_value: 9f0882a3779fd74998b9c8ee1009e8bb00ef576b71cda1f0b3ce2a
                  29df7872df

  exporter_context: 70736575646f72616e646f6d31
  L: 32
  exported_value: 5f7f4918f923103a198fe8dceb584b364e3209c8cb6a57591e4e73
                  d9f4981586

  exporter_context: 70736575646f72616e646f6d32
  L: 32
  exported_value: bac03295658e50b3af56f1625e5c75c2dc5cbbaf40e35d62335bce
                  d71033a1c7

  exporter_context: 70736575646f72616e646f6d33
  L: 32
  exported_value: e62eaf1f8a45248d7b9eafc1e289267f633aff1c97d53e93dfcdda
                  af2a6aab4f

  exporter_context: 70736575646f72616e646f6d34
  L: 32
  exported_value: e1b2cf7512f8cef31523f5dc20df0186fe51baaeb39e768802943c
                  5050973537

A.3.  ML-KEM-1024, HKDF-SHA384, AES-256-GCM

A.3.1.  Base Setup Information

  mode: 0
  kem_id: 66
  kdf_id: 2
  aead_id: 2
  info: 3466363436353230366636653230363132303437373236353633363936313665
        3230353537323665
  ikmR: 7544cdff18a3f8789f512337a27b6c68efd145a30ed3dc630f5dcc5ec6932929
        bce1c023147c48c954fdc213a7c9c0dd8895b8d28ec5c5e44d0b30abf9d8ca47
  pkRm: 3f1cc56f89842dab230c6c09ca701c98db48e54a993a498b4b33365360513183
        09c58a8bbee9274b19a7f297510601197f42940c4207fa027965828e42f4a254
        f919343505cd922bf800a9551a63d784cdc61cc1c3566a87c8b817b6ced80133
        15711e3696c3b0051ce7497d9bc92796b3b629ab28b55842ad52660d3b268599
        c467c92311b4a792e827e67131582c9e3d1c8da43ab201319aa95070e10748fc
        65a1316a6b22f03fae85a08691395b660e759a33f9c80ec74516c0249ba6388a
        a105095750c7cd947a747497a879006dcbabdb98bccf025450810884c7ba8c45
        2447e5cf0ee75665468fb16c5314c2af5b05a0eb0084087c98d985bd53b95dbb
        e589f31401c52143f678605e712f87b4076eeb076bb3a099f383242641680564
        0bf57fbe64484a79262887954f540762ac3a388258767caf06d3cacc1b9adf21
        a6d7116c30d44562b8507d34045a760ece1169adb264168c10c7844323f93c67
        710f65e2879ada7edc7728a6eb63c9c37b7169a360cc4d9f391060a42da0203f
        f28b5a702b82f1707e6e777e3a793f0fe5c40ddb4b1cd642c25659989bbc0270
        412d750d9d50866b532ad2e83f171bbab0d928b280c76c0a3a2da8555ae82341
        3118e52b31a9f6a576837b3f9c0e455244c757b3b6b59d0f892bbe566408b82d
        f224366b613e0c4915256647a01c495529c125956c21e69bc7a651cb3abcf9d1
        1251a2318dfb57aea391fa8948b9024105f244fc1c64c4a23c37cb71b3fb7f31
        c102f736109c6acace09c24edb015a7c17ba67afe241684b4181a874049058c7
        f3d157363b8839e4027859911d245dd22538d9d953ee3699deb143b8708e6894
        30fb95451bc0360632401c2a9ba537a73c855973f87032c993f0f26cc3a27a6c
        67b5f8a84df1571498c3790cc3933e80b1e88b7d4814ab2980b6821795f47655
        39e951d80798a1e93df6c882d6ea05fb21914a0b7c0ee9cec700cd8e8a46cd6c
        571fa97f88f5496c6c1bbf671cf92642ee7a8c431152bf8ba3ddd474829c4632
        58901058bf860cb49239ceb1074014fb4d1ecbac121b17769057ff272d531c87
        eee2703ff854592385a7b8bf87cbcf95422709b9b11a05291e18c61f672a84d5
        5874b952588b1f8f8510fcc13899e575d91b11b2164cc1086359721280895b0f
        db63bbcc63e4e84346523ef1ab391be9591af524b6dca27de0a06733a754c764
        329c3b8044baae259f5aea803304192ff382f3e4879a9ba8b88c0dd3890a6e1b
        1dc6619ce9346b607c3ef1f24c29aabd0fb954c80777db8a7ff59173aef05efd
        13544a621f04919d63c87b37658dfdd1c58930bd9b58ae275ca32b912349c975
        e308864ec95e133917ad9539e7178a9fc74e3fdcbc4478b3eb410d4292c5f78c
        b32e217d6e381639ca363693423fc29be35a1ab7528ed9b84eee867f426c2aa9
        6522a637b0d4b164e9a527d6c9108ce77ccc33389c05cabde51a4531ce64d59a
        09aa6aa7e493349510e8c69ba4206381b50f008a18eda076240113acfc9fb8d0
        c852dc40a75784eb555e0408a3e6e613672b76ce346b3b5c27d4f09a4c89caab
        1426a320c229f95b06765847b027c3d9896762b769abb6fb31066694c413576f
        2ec29b93c0837b3c46d6065d7d9a801b0755383493bbc93e919b0bb3d6979a27
        7695a298a8346e23e9508e6a9af1d2bbdca30f9c5c275176842a92b8db727fe1
        f92d52e70a1976851643c09f42cdf6ca739ee93904103427d05f49cb54f540c6
        27939ad4811214b9a6e8d2b5e8d665ffa518ac10902707241472750c8c4d90fb
        9288da17fe4110a0032c853444f2aba97ea389c1e3590b206c8b6b76181c9ad5
        10c6860bbebeca69ac1aced3a0147d1803d570047d3259f329b14f352fcd9666
        9a6044280333f7c3ace6048dde44492f70bf8dbc7150b661a02460ba61992ee8
        974dc225125a87dcb4598eb2792bbccf390b9dc966632e918d58c7a16ccb4c08
        86422c3b467976ce405acec161cf3c34742cc912ff313390b26de1f56a341917
        d479ceabf13a8b6077f81158e075a1d55790f7495c76e3c348fa122165cae430
        b48a753ff7dcbea6d59135b97127b844358a4620299a5dca16b634897a947121
        417f9837b3a8a7baf610a41759aa8be73fa5f22c2656c0149408128c5aa202bf
        5be9e1d12f54ca0db54056b2c35830aa4a33467dacd61538d7db881c7ed5ded2
  skRm: f279454d08150d5bd81252001d02e1099f12fb7e9be6da2fe427bbaa2d79b0ab
        67306c0153c052610c4fdba3fad3435aeb1b65817d442c5c18ce07ea42440005
  enc: e29704446b36f5c02d8ecb2be8455ca5b7d9001bd7903fc9c048429e0fe9d9d15
       aaaaeea991cc9621e1101acac18b28af34df64226c1a5c0b7f26d5ea2b49fddef
       0b7f7262364f2c125ef297d7a66ec9a83b0f36421daca3eb525b8ba046000e9b7
       efe28f84f542381b692655ca3e65c2dba93795d3e1f1690f25cbe6a259917e5a9
       f0a729556dbf168a52296f12ede001bd48ee24107abdcdace0c10cc30b3240059
       8f0ca10f38d5ef31d633f041b7778661b68f2a5945996e43037c8b480eef09915
       cfbf0ac73ac977e033135e293e30fb351e708f1207a6a4557d3006efcf15c91a3
       c15735dc70f0139c7ffebfa5dc80e571b08bb884424a233b61d5be2b45888a09b
       0a61e91e11867324586e8651166dfbe8ab865179e9eb2ff5f9591a375b6da49b6
       14e7dadde84f62bedc588b0f9af80abb9ff0885e2819e8cbfbb7743cebeb086a5
       3fcb646d7bce56715e7c7d0627216866ffafb80fb2ba30eefd831c5aae04be2ce
       a479716749be3e50d10ddae80dbef3ac31975f36df700b2ed055ed36b9c1a8e98
       8e59d52b427e27e21fef1798422df54be26cf201d36c37562cd031a358886e221
       2cc9112bc249d6e7769fbe3495f84433ff8ef06b33cc9f0fab46b62625eaa66c8
       2300f4fa29b176ad76e71d7c735a2896911644c97b7844623e73172792d2fd61d
       b3b83508f4614a4cd1f09569f2ef4b0d638aa1dac7fea128d1e0b544a3cd57ace
       fe681e62b57de7641d500ecff2eaa34a782ffd5b174b74b15b90ada89cf1eb4c5
       5b5676a98ec8354eb38fff7a5762bbba0b9b6683fd45e32bd0199a873766f4736
       a1884cdda1cd30106cab2cab691d4bddd3b87b683a98a84de8e64707d025086c3
       6dddfcc9d02a8bc76f10dc44e832dd73986634e90345b7d6b2a9c8dd3acd18a7e
       5db8df2e5c3574961499a07178b634e1ebb4e4953401c51c4a8383bd699add80a
       a3f9de82782a78b69c3cca8bf383afbd556a9814764d088f43e98bfaf4d8e9590
       b07c742e12274ea9b568e854bee8e6d0f7e902a28f5b2fc72d6fd10c40e77a914
       829591f391c19260ae5f4e2aaa113f8fae3de4f9ce85d91eca28bc300e6504f58
       915eddea0a7552a5c701a90ab8dae72d990459860f3df2f4305aa60185e20e17f
       4173dd0749552c1a4edf0b654cd41de6c3b07bff1bc4c873f4c06506f04b1eab0
       f8fa5883577bfa504b3b7b9be7a1555d71d0d7660679104d3e7f84cbc1b575314
       df50e0050e2fd5aa9c4f571c1b2d26a41558af619e15ffcdd8e27eb5a81c474ab
       cf118524da82c96dbb691dac5679e5821bb382708476041d87a7175bba2af8b0b
       bab27658ef5dcf7f242e47129e67bf5d00e7318aebb409ce4d0607136fa38e9eb
       2ec8f29f3b2f4ca485d19f8d55a3221bf095ea4c155856d169b744a756502ce85
       d8415a2b6bf1b629282bbaa75c179e63888b57460fb4c2c010bed08e42655c670
       9ffbc032fe9ba2532c09c64e9eae3fe47113555cabb3cebdcbc790dd1e145fdaa
       10932fe245e33a486465abc9e4d017f52c03e5524c7d8e2e59727fba297e3e961
       79d09af8d56f178ba484ad194a00c701c521c82cfca2d1461dc507d50fa2f1be7
       3087ee594753dee96196814cfea07a49f0a445219106e9e1dfef08aff1f136c24
       4880b793c1484c10ae852f22bce3fdca96ae4cf1d4674d6584be28e502b9cca57
       05e9d03dcfe1abaf8a0369bef7bbb7bd0f577f6343be4dadc159c2328c861584c
       88d9624b26ed5c6461a7cf20ed84a0af3475710655e7e50427b12a6d6c7a0fedc
       1d59ed983f29568105bc3498f4c7b5df5006679e6e753a9e8986d105edbe43402
       a4a6289e88f26439f9a47dd887dfa9bdd2680840700cfec8d03952afba5011a23
       f55d0188443479ee93b40d9e9850272c3ad46e0675a329aa6dc1c4854becbc679
       39cad13ff3f3832d95ca5053d5e867935cf1fc19b737bbbffae220bfbb8b6890f
       0541d9a6824e33f09207516659579370f5279091b802a15343ec70924bfaad366
       3df95bbe667270ff842233c63d79f94ff65fccbca72282d8694e72cd7fe70e40b
       b1adcd9188a056c81f36cc3b8c74daed3738846fcd729d9c871dbc81a06624ab5
       89bff471afca442d8434c452853d43ad9a0d0e39413216e65ed05b7c8121f0b09
       abdd9d1cd5bae2816c7e1498e49eefef0c0b0ace052a192922fc8e2ab482e2e67
       c64db0810c5e4c68
  shared_secret: 82e39853d199735aa5bf8fb3fbee412de8b39ae39cbad0bd7326c3c
                 f1f6c6232
  key: ebd832651d7005d5a35804f59144f56e0314e41037eb8bccba607daea19dc555
  base_nonce: 013887149dbdbc55d7839b50
  exporter_secret: 8935fca4f779223c22ab972fe8a502fdf2a900679dfc2043daec9
                   23a367bb10b294386eaf52196dde82773c914c94f37

A.3.1.1.  Encryptions

  sequence number: 0
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d30
  nonce: 013887149dbdbc55d7839b50
  ct: ba95e8b9f0e4379e073383af32ee83594859e83f2ccb767886fc9af7e7610181e6
      245a732465884ceecbfdb9301b6865e05cc45e3587d0655bddcaf72459649c92db
      3d0a40f343f9d344

  sequence number: 1
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d31
  nonce: 013887149dbdbc55d7839b51
  ct: ee00afc90fd18a09fb75cade86c1d0e6fac3f24dcfa6a01a185437570515f69b6f
      b893b0f42c5502366ec50b3d4181cf0f0fbcda62b1909870f77b0fb000d7be054f
      b3a59df4c1d727ab

  sequence number: 2
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d32
  nonce: 013887149dbdbc55d7839b52
  ct: 3c1289e325df47042f142897d38e965e39e54140ba0d7efe4fe47f45bed3d54bc0
      10b94e7fb3f790557f191812df1f21531558b3d4d1fa0c81863fc438bb6a293df2
      47ca695a64aca140

  sequence number: 3
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d33
  nonce: 013887149dbdbc55d7839b53
  ct: 5ea8a9aca17669792f0d1575a878477d5c4df693226698f62476efce2549a00a69
      b594f7776ab70b4ffa4ff4ffb3f6b78f6d8ffee59ab62f4301a87948667e4f6d8b
      7efad4215df3d0d1

  sequence number: 4
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d34
  nonce: 013887149dbdbc55d7839b54
  ct: 55d64b7b3ffe781c69b05f74599aae39b38588f3d6e0d833cdfaf920ef1df4bd1f
      d658fe005f157ef9d368f45d0f3cd41068c9059c62ca535ad58781afc351f4b386
      11dcecc5d40c9d5d

  sequence number: 5
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d35
  nonce: 013887149dbdbc55d7839b55
  ct: 03f577ef31fbbaf54252e9c9ac402360d7e87633d70c9ce384f89462e8bf7d52aa
      8b3ce760436ec89b5dea72770ba47bbe11a5d27fede61c6bb1730300334b4c6a44
      7839dff17982720a

  sequence number: 6
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d36
  nonce: 013887149dbdbc55d7839b56
  ct: 8416cc680f83defd1f362e4728db97e2bb8d05b395a45b4429aef680295fe887f1
      5b6cf2f1c713271e9c768ede2195e229461f2634989d2c1b348d02337c518d0680
      0aa5049680d68ba0

  sequence number: 7
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d37
  nonce: 013887149dbdbc55d7839b57
  ct: 9c3c8a2e6940930a9b09aa88070dfa7678acb40f133c4aaf50d1cf82da0e04bd44
      51593a1f3ff1f862ee8776e2904df06bd566e6e1265d10f129f947daa5caf1735d
      da05aa4417f9fb09

  sequence number: 8
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d38
  nonce: 013887149dbdbc55d7839b58
  ct: fc64a28c49e056a846114179947087c57bb09fd3db49e4f149e22c01d817dca290
      def7771dc66a20bd26dbb28d366f7e44c3e5b02b8f7e37921d3fc4f3b0865410f5
      cd8bb919ad824744

  sequence number: 9
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d39
  nonce: 013887149dbdbc55d7839b59
  ct: 6b011b9de556f1f06f811804b3a1b4040574b064b60b762027545ae317b1e6a8de
      53cdf253d81477a596433c91c1ca4cf3f06b573be0dee810ccd65d286e1c272cfb
      c3af0a439e1bf0b4

A.3.1.2.  Exported Values

  exporter_context: 70736575646f72616e646f6d30
  L: 32
  exported_value: e35760f027e72a66915f5fa27d59383295a42242af91511563e6f0
                  bd135fce81

  exporter_context: 70736575646f72616e646f6d31
  L: 32
  exported_value: 30ec84fd5f4f49cd6ab82f09e903ee4192e92d116381510361b455
                  b5d29df750

  exporter_context: 70736575646f72616e646f6d32
  L: 32
  exported_value: ed31f4bd4b7c5acf3245c5ae651b04bf4164ed3a700c0b04030610
                  8b1a315cea

  exporter_context: 70736575646f72616e646f6d33
  L: 32
  exported_value: db0e641c78de3f9adc2c441a770d848446f47315c8f8dc004a1255
                  1115341dc0

  exporter_context: 70736575646f72616e646f6d34
  L: 32
  exported_value: 03471a43a65a317c6f35a3beafb2a73bce0b710d7b23155d2aa615
                  a41c917731

A.4.  MLKEM768-P256, HKDF-SHA256, AES-128-GCM

A.4.1.  Base Setup Information

  mode: 0
  kem_id: 80
  kdf_id: 1
  aead_id: 1
  info: 3466363436353230366636653230363132303437373236353633363936313665
        3230353537323665
  ikmR: eeae80edb6af9026dcbd638fcef2f4a19e03ef68ed699e507780f2c7d167ca53
  pkRm: ecab6a5f147046838ef641bf65f52fcce29e6130038573128e839a1ad7cb1a35
        a9c95c3a41d7464b365a3043b17a153c6a09382c580fcec41f38940d33630963
        6c775bb20461f9814be668deea4d07623f545241445b72bc15125c8b90a7c41c
        da17292f93ab55659fdeab787340011e5c3de9e4a699660ff5256db96224b258
        6fecf6475fa76bc0978fd25b1099603053f48023baa119074011e01ca3f92a09
        ca088c2a9af0697416e661eebc46a2069c31042c570678cc229f6e502121112f
        4a148acc59990d6c378db26f97398bd2929a19d0c50b5713400b70f9d50c7938
        8510c13bdf975f4b4c60f7fa643f059afaa580b61975fd59aa98b4c5f2cac342
        2b9f89f73d14a18a15942a5567c4baa09359a45d1ed35177959bbfe196c7314f
        95f0a40d24c6668b10de95a7e08cafb46873c99611bbdb8e1d5cb0c8c2beff0b
        41fae1000ec9cea1032a3a6838c3605397d59fb28c9975aa5f958725598a0c82
        b788f7fa22dd741a0e673497617043374e47f69903c891f47787ad069132a93e
        b6f9b15ff9923318a5c382c0fc7b432d8a00652197941684a9567a92515c71da
        a8daf80f2e425488f88bffea0ca2a6c682d8aa68264ef00241f0ba62e2d529ad
        d964129997f51a4a0d195b6d5b0c31634ae81cad7fa53442c76646a996b60c3e
        5f1818fdfa1895c0aa8cf393f91baeef237861e48bbb236c3460b949800ae4c3
        255454582a04abc3777c94f3ba0f3a4b4309024d117e5a3597e53a6655e17524
        805dbb4386af689609310f8c85c101bcbdca7c9fbec251a4f62e18b839bf46a1
        da5034a8887683a2b56133b7909665c5a097b7f40be725131156396bd60ff602
        1f17672795a375eefc66ce667e2d861a03242a2c67ab845301b2882cc62b54ba
        040a425611f8599744b741e55643bbeb0851b30ba7ca922d0078407396272355
        ee3c08a91670f2b8488b3c9c8791778a000aa263a75322831468679f79557886
        3e67e149ccab053b39497be4ca149133a2e91cabc8390119900fda90d7b2413d
        a2bcd9d244600178b7164446fb3a3dc433a415a8001085b45bbad32843835464
        999717ef180f51fc8660e63b400c957c609dc2bb6e43326fb33ab6c6c66dfe78
        a70bf5394c9262d65a395f857989854b95f99481d1862a5a3b5555ab9d44b1cb
        0bc9df89395b192bf4c43dde2bbb610850c6024c8591a7e6933746921421575d
        703a45e2bc08f86376c2a1cb2d133cf0346ccaeaadb81929c2d6126091c06ca8
        1f95e413507b91e0f0cf548a5e79c344fd962c56c895238395abfa90bb27b7b6
        46707120a894c3c947411ba11255f5a6a032cb3dbd06b80d1229e9dbcaa3fc84
        fe65561c3c4a8333cb7d1b4df823466041123fb604c14349ff8bc4b02ba1de71
        303cb99cfb3649f16703cea12780688cab0529a4a8cf1b09b5ed705231964a74
        622718248be25234add881a02a7572cb5ded432ef95a078f626c0006a0a0cc4e
        7992b08b52c552d80b1c71c3906b32ae52974b10447cf6ac6dc3a3dd53151611
        288dac5dddd98679b611d0c805d48aa5069451a03c3e9e880228e581901a5cc4
        5c34cfc1cd258a7f7a10b90c281dd3da315a0b3a5c9669f3640c27d33028f922
        764585f8ae61cd138197f7f30615fcf00c2413dd168044c9a4e65e5f68e93f4b
        04edadc409f9fdbacde2f03203b08d8f35d316fc7e0a2fc57799c2ca8332a514
        c58c4260f57f980a241a6f98942c92c8c90f33541460657dde1040a84055924a
        69
  skRm: dfa3a04d54a0ec2f7edec57185e3df94063855fc7af64f25b815417a2c6eb0e4
  enc: ed5b96e04d48095bed5a54589775ee4979362198c7727fdcd62fbd6d0d4552aa5
       ae2a30283049bcbde84dd6e4c8a330bdf9ccf04190fbde2c63c0c9026740d5d00
       750e4c6244ac0e7b6a6edb8782f0ac040b4161d3a9f6500ffd1cfe6e93298ccaa
       e1dc04a6519f52d96e43c4e7477cbdefdd17b65e002e2b04d1f3d5715dfa3a001
       4faba0eee73a2f30d9a71dfa4ef9a0a37ee45a7f67c9209efff17badd21d452bb
       ae583b046a602614ffe168bdd8ec27048dc5d95f58f8b70134c161282816dffbf
       9f88db63f28b39ed958cae9b5ea26f0ee54927d1483b644f338be3cb6b20157fd
       4b91b4fa7266b32bacbd73e12afe877181d0123f02212902b1eb436c0970c3953
       55ce6d92568014da811cd369ac68cb3d4be48318a2072965358bf0799f1320ee1
       a98268d8a5796c965bbc19d8b5ec7322e5390bd93aa85103e4dfbe35f16331afa
       21a128c62a0f9bdd04e321d266187413263fdc40522ca665df0272ac2a0418b69
       2148fc3c2aa9273aaf424f9ddff17fb714e40be0595e6f3cc2d4e82732622ef54
       5218ddbde8b902ff2df9150dd4a3d6af2300f57e9b72b6eccf95bfe26ced55081
       e01d4723a81abd0f00d44a40020d85d9c7c73ad4b129f7ebbba4d6c57e6251c58
       e824b47624e2e2a78c734cf21e76f0d7faaceba8b7b1ad1d663d8edc09b20d475
       fe79c6947f6a56fa371bb0c80625ba85fe475812137e216709fe99bb1a8d63ea3
       8b34c89c1bde2b8685b146bf185537e53df86bae6dad3950fc946fd47893f48fd
       d1066a5fef1aeeb75144f0966717e12b092fd96a30503d7ffb84d1125bfb6422f
       296c1ef82701e5cca93a79a440a4b29a9de5961b582237fb7d71e5380df2bb886
       1c5dc2c6bead3ba60a35f6104bb50481e1436cac2828798011b9ba20a39017576
       be7a49559a3eb9b1212bfede28f72beffe5b40254df490ce0cbcc9110159d24cb
       e6b48227c5d0bc91c70d7f5204693122d06abee77b99fce86e12c51e6a460d5b4
       7a0f19dfc5e0b6fbdb454abd151efbea1bc514074405497308a7278da302e9f64
       b033f78df23a31ecf071bf1f9cb30d9a7ea1cc87dd0066f3c1aaa0222caa580f8
       333ddffbdcb795da1869882ba55497b33ea610e38031de9923e1ef1f2cd48af49
       4507a7765c7e67734e81a4d3683823dc7d15e8364280f255b8bdc7972c6d5f138
       5d11ea8bd5d7225fc5987a3a6d65bcd20b5334fb7036785950dda89bbcfd337ac
       286d87bf5447f3c7d16930a07995236970a65acb5c0cb56cb6294046296711b7b
       f3d7c1d40d26efb9550a50d653cea6844caf567dde9e78786b91a21eca728ef80
       f4b066962edd50144f2a0e7f7a36934a6ad42ccb51bfe75c66839af77456a126d
       71f09b40640fbc3eca319b16c525f422fefc83e4a2c9c2ae18f1c967a77660dc3
       acb57bc12e1f6692fdf1ee034fe8e0f5808143c4f342c5e6a37c520dc3a4c14e7
       7ffe260e1027ec91bb4682417cfcd505b5c45e01e1532e8925eeeaa48ab5fd80e
       28dad7034aab8afdf96c6234842aca004f0aced6022c4e2f067b928d4908de20a
       a3f2d14307bacc6ec685b026858d06f5e98da3f120d5e8ab830248c49c3c4a4f0
       830298100999cbae5419d5ef0e557f0
  shared_secret: 3688931682c215e9e06ad620eba7faa70dd0d38081b4ea3d5b636ee
                 062578991
  key: 73d38ac7f53e00cf8f45a8a1c404db15
  base_nonce: 3285a52336faa9bd2d1dc154
  exporter_secret: 1109e3cdb4b327d00442091b96fdcf11d589d7b51485eaeef46a1
                   969eb78d3ff

A.4.1.1.  Encryptions

  sequence number: 0
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d30
  nonce: 3285a52336faa9bd2d1dc154
  ct: 7be7af12b6976de87ef38a5454e94dbca114430bc8ebf32bd81a631b2c5c7fe67f
      e01acc69197d53dcb207c48073b9b3ea9fb5e1d20f817b48c7b3257291ae26742b
      ba1be707d78202d6

  sequence number: 1
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d31
  nonce: 3285a52336faa9bd2d1dc155
  ct: b9e5d23242fd7cd8999282f58e324d5b9d278221311c2489187cc723ba58298c9c
      07b1c44bcf97ae312f5fdc67257fb8eaf4787d1250eb807bf5fef90f1740ce98cf
      a2d5a87f32868b06

  sequence number: 2
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d32
  nonce: 3285a52336faa9bd2d1dc156
  ct: f30fecec3515de28777547caada8dad061cc6d349cccdc4f1e33e3b7caf960276a
      41a46f5e5e3bff66ffe9f7207c4998d53b744a1e8693276a6e63aa292a72580143
      1e8b491251ad4210

  sequence number: 3
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d33
  nonce: 3285a52336faa9bd2d1dc157
  ct: 0843f8d4beeb2ba621dbab9be2fa9b5700cfc649d91cdd6239edd7b1936688dbde
      5df676eb27d70a3292786a92a6013fdc1217d0640140be0637334a6dcfd7295e73
      6ed18e118c7ceded

  sequence number: 4
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d34
  nonce: 3285a52336faa9bd2d1dc150
  ct: 25d0c73fda170f305f79728beb5dbc26fa9bc61dc0ac2a58dd2627c7a2f9491f76
      9bf43a00934d73836269abfcd30807e0885bbfa9db5e59774ffe8d0c25b39e5aff
      446b8477d7abb969

  sequence number: 5
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d35
  nonce: 3285a52336faa9bd2d1dc151
  ct: cc09a83e476f47254e23aae994f1f987e599286498f7d49f097051fa456d2122e1
      82f74a74c4c240af1dd44fa47d3c1d49b7f901caa90f772bf77818f55a5384922d
      ef70f2747447ecfc

  sequence number: 6
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d36
  nonce: 3285a52336faa9bd2d1dc152
  ct: 06ef6f67a5b9cd3b7a800cf94a42c4418c8e56d41a1fd73eca8452fbdc16a65afc
      ee161589565a9f8753a063b47694557e8bd26a40687bd27fae52930ca2dab851a0
      c2d52828ab58ed57

  sequence number: 7
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d37
  nonce: 3285a52336faa9bd2d1dc153
  ct: b286a4287d4f4b17d1112164e05fde12e687fbd867cd044a3415bb962bd27f7525
      5d1d974257c457c1c617657c627c464b10196cecbcb8f8169d01886d0b3bdc5347
      9a70ccdd0beaf534

  sequence number: 8
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d38
  nonce: 3285a52336faa9bd2d1dc15c
  ct: a110b6995c33ef0fc7444f062d182e73615b8931ea415619fb57a6989fcb30bde2
      739a27eb54b6273729d676eff56fbd6d6a1f7067eff93885d124fe5203be649e90
      1ab5cca8578fcdca

  sequence number: 9
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d39
  nonce: 3285a52336faa9bd2d1dc15d
  ct: 73c8e514dcc915f997348ced30795f3ed03d098cefe2fe8bd5439609405171aa5f
      ddcc362e9a56799030addfda4e50f2951361b441f1b41b8a5222a69b2fc444d4fc
      39b85614695284ec

A.4.1.2.  Exported Values

  exporter_context: 70736575646f72616e646f6d30
  L: 32
  exported_value: 8ccc068f1e0364d9dfcd6f138f0f964e7d30275fa300548bd45b40
                  22dc884851

  exporter_context: 70736575646f72616e646f6d31
  L: 32
  exported_value: 95a615054a532f857ad1b59d2a1695fa676395060809f9c5b208e8
                  d235db2764

  exporter_context: 70736575646f72616e646f6d32
  L: 32
  exported_value: 0a678a6385518d2bc45541721df4545e6fcf8f843c10794f551a69
                  ababa39e31

  exporter_context: 70736575646f72616e646f6d33
  L: 32
  exported_value: e9f5a0ab3ab64939777cef0bd3865eeba1589c1a1fcfa437e36f22
                  107b08fef8

  exporter_context: 70736575646f72616e646f6d34
  L: 32
  exported_value: d3a915ba660a940af4233eed669fcebe50ea5b102004091917263c
                  ac57ee0386

A.5.  MLKEM768-X25519, HKDF-SHA256, ChaCha20Poly1305

A.5.1.  Base Setup Information

  mode: 0
  kem_id: 25722
  kdf_id: 1
  aead_id: 3
  info: 3466363436353230366636653230363132303437373236353633363936313665
        3230353537323665
  ikmR: 0379761fa4f6869592b0d1f9a71eb92b122dc030a7a8858132109f6b1a4bbde4
  pkRm: 3c282de306815eb40990929aeee0839bb37a71a052a9e5242cf15f4c4aa366e5
        142da0bb8da49e83840972355000288edfacce195826d1da5fff509dc5694d8a
        e6590fa763bd7213ece64e74c82134e3b8bb571c841967e44a500c2acfc7c1ab
        a59273a5bb326ef52aa43471a9ecb54ad5c12d19bc05797d59980ae788039c26
        5978586bbf92ce4c4b9013f3853f501a0a7b834f4843324b9bd3a07ff7f954d9
        7aadb7d8621c58c75bc47995d02a2f70cc3d2bc519a8606fc0c9eca0b30a998b
        d237297dbc0298b106dc00c2a541bdfa9a26c95ba67167acb81ac705f1952fd1
        73e6e23331c56db6913305384d52c51ef7facb92c08024a69e26437e1c289f77
        d455d08a1500c4a703acb376f424d57234fccaae84b3ae8d000ea8b128c4e259
        b6a976ffe650a5d9063c83996cbb00b30220ae43170eda370d623f481b24e469
        2e07a10777ab703d4b4a73c71e7a33a6f52b2aae7a4423aa5b69f58480b7acb0
        4a6dac780a345317b40b171ae0264fb057810bce9c6b5a58027e3ef851e02cce
        85718c396824e3986a35e12873ba1ee6ec4c2cf0a767234baa61367af5a85f44
        3272fc1e8c338769b8c2b9f1c58859cf920a9c26f71da71a60abf1c3e1824775
        b12e9608c711938475801036281e8d45a06942ba1164573ee1077b7a40ec213f
        e79575556bcab9f6823cab8c23297d67897bbec17b4ba6752c8913d0b781b993
        2a6df03505e3aa25fb6f75c20286b08b375bced9613cad18cbd42ac4063827af
        e5680e3cacaa96ba8f6c523236ca69da4475999abf18a25a433c94792988945d
        dfbb8413d367d3ac1315705797aa74632704b936cc96e689969118fac11b4f4c
        927a66aa670b4d8147a23a42aa6a309dc5f204902726c7ea6f1c6231a2623081
        48c2d2ac81123050188b44a80aa8153bc5915aa8c207b22895a8339549d281c0
        14162200d63cb2015a265ac48f0a3c93b9c71e05986e780c18f38c8fc5734fb7
        b22f34cc851413a3d17090021eef6b7019b5b93012753b150ffec031a038602f
        f62ffc6713c290a33ef86dbce641d579aa92c5aa1b4a6520b921efbc3c95156b
        34658dd14a7cead366a351c7a173907bd403c0cbc9b562281ed3712a4b6233d6
        0f09d80e38e67a01c1660bc02a31303560632db6c63bdbb0bdda46b4faa77ba4
        cabfdf0789185c295c40220f65689675882fcc452b802a4baa895ebc50a93117
        8d442c857ccfd503b678864a83565fec19c7ab782484877144745fc7227d5822
        37498916a03a4ada6321b62abda04674f39338078ac087b1a52b77781d5574d4
        1a2d320802b9d9bda34c8e356a5725fbae10599b83b97114c6cefca08f8d0480
        9b8a79f9f0a26f2b9007f501a81679f0104c67f244cf514067e04f1aac0c823a
        6e2cb9517d5722eb3a8326a7b23ed62266f04acca740adb142bac5ba66c5a6b1
        22a3180b97ccd6cf9bfc77a639515bb861a5cbbcc7f53d19b0cd66a0b64df56a
        15a98bff77182b7751ecc703bc947f516279a3b566485931415c4a9264bd7fcc
        36f1c4a1e15c3c8c17cab12805d9f585f4cba9bd496805f04c2d930a8e25248c
        02a362f8a56109cf263a0591ec4bb8bc6604d30dec4c71510626696865368628
        9d7ff82e53d504f85fae5d4f64210866450ad272b3e4849b83de72a2e3b9fcf1
        5ff88bc7348a401a95215ca1b16cbbfe5e082dd66029e768dadf2e52e283ce5d
  skRm: b3f98b03126a431ccecc62ae0f68e102c2d8e1cc7b21ba85d821d8e31761e0f8
  enc: b440cb006466e8ee9d161b371b6fa1ec419d6a7589492378dc678fedbcf9e7deb
       fb47f7e0b5368b0e77ef5b5866686b65231dbd1c1a42e0af9b0abb06c795a1af0
       734b450dbb60fe0486b1497d7b09d0c46617a40c5f8c8ab51c2e8e1f48023f73b
       7c4716bba2e905d5fb42c3dedff166553ecf033305a57bf436317e6513deea2f6
       5537065bb5d82dc4b8a965c3e939b910dc6b027e01673a6e1399b93976292ef9f
       d81120ef2f6c47d94a1c77d9fe16ba7107a8a6a4ce9ce0d302847d602167de077
       e17dbb7e0154202f76c381c4b6d8bca51680dab4dbf373da8f09aa23d2174fb36
       681ce42108f7baadcb35626baf30a416bd79b3e249585079c277b79b7b31108ef
       061f25b5d4e548f6f5cc3d4c24fa0f1716843bb63ad00a78f37d2e2b81517810a
       be9853829bed7b3ba309ad697d8a5f66af4dd237c25725e9c6263744bf8641d47
       5d4792ab0535d2b4fdfcf0c5d95118f5779521023016d49751794a1ce66f2a652
       436843978937562a4a5e8628d2b720890d7f3b21c151399ba7db03cd15516c6a9
       4b84f6d01a37ba92cc7ac6c480dc9f67c3a066378180bcd2922d3f5c65d69fd0b
       96aadc055d6b05ebb1105acc609f200e0c945a10e4e11371e23369de2069ccd71
       75a652c3cd09eb7f17c9b65b4aa79b26468f9b21f8c0aa8f7471d5cfbf3697d3e
       edea9351597ce981e7cf745c2950070c1f82f132b48584d03ba1262cb856ff6b5
       ae25992df8612d24f068b4325d3360673ed3ef6e2a57de297d5482c5cc355bc07
       f1d975fc6d60cd7109bf5a77a0ff7b2c5d9f4a276d30cb49da48b8b90b644b15a
       5b68fcc67c25f09a8e567cbe4fa2e2ba11c02993e9e9b4116a7c60da64a719328
       00aec2fb4d2eceef57c6fc2308f3adcd9b46a28748516284bdb4b3a36851512c5
       e0e6ed37ef5f00b07dc3c42667cf95cad764e47f48a994d17c103f8225755c760
       08013897c03c31043df0eb39a603e09caeaa41ae24488fe96e4d83b4ae5481045
       f4a7cfd7c80b31ce9eeb8fdecd34be1245f368ab5a3215cbcdfbe0529e1fbc4ba
       0041cfaba09836c25dd6219e75fbc6f143e74d686ecd9e1a416881bc21a9129fb
       865e82332985798f701f7952c4e69e7b4e6bd03bffdc0c65e2a2fde89f73b8659
       fd2cc7dfb070d3e95581d1bc587a2d9c4bf142fdc1f20856d3cfb64d35744ee27
       9b829184723221e9fb19f012ab99c4bb1a904a116727b667c5a11a0e11f3e3168
       2b0c114345ecc3ee153bccd884654bd5a8a023aa3db878148736f6a090f927854
       23a9ba2b037b3b90ee91657ba48a125360dae75a6fddfea406ca823a5e4fbb54a
       a8909fbd85d95d2ed256ed5d6a9194fad0d81a44d3172abf6b90cecd1ed208076
       2d670db4d3437ef8e9e7d39db4b4215c33f8d19240ed4bf2de8b1076b34570704
       3a735bf9e96e16c8b670cf2df0ce8db638c7d84a13ee7b35266c7f0e60d2cb2e5
       734e9d646a871d0dfd8b4ee5f825bf799a1251ed21e54510e9c605bc83a0bd967
       3aee80e8d064a95c3c3151ffd27608173637fb9de30b3c02d96eecac05dbf7c2f
       bc98b4a1f6972ce928322a22e2b75c
  shared_secret: b90cf181d95351d1091569487caaf6c3434eeb181a2c4c04631980c
                 e139afa67
  key: 4a4c042267e8ec360c83b2baf0d5e3dcca73a86531cdf67ec41d95bccfe12387
  base_nonce: 5ddfaaee10a4dfd0d8e1b49f
  exporter_secret: 145e4b99cabeaa6f5a380367d140d308746ea25d96f937288f854
                   03b5c4384ae

A.5.1.1.  Encryptions

  sequence number: 0
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d30
  nonce: 5ddfaaee10a4dfd0d8e1b49f
  ct: ac355d192158cd54250e1702be51e9d2eafe5f9292a9f153e02a2323e1ff071a30
      947836c38c63c986c28ccf05e00d4e5fe066a48ab8d5b39c69d32da80c93dc868d
      aa0f853a6cbdd640

  sequence number: 1
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d31
  nonce: 5ddfaaee10a4dfd0d8e1b49e
  ct: 712e40f2971afcfbf899f766c47d815265c1a0f52dba3bd68dfe6d14918f114b1d
      85f5ed0409a9b6caa370f1ed94b9d564080dd7468f629881db3aee6db91b5479a6
      34ff18b819694d43

  sequence number: 2
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d32
  nonce: 5ddfaaee10a4dfd0d8e1b49d
  ct: f11c81d6a2d45fa589095aecaa499b7af97081376227f7a0970936ee5f034990f8
      8ce1cee9696864419b9770d40c9ecf35a27eb16fa0c039b0039cc3b11ac1cf81eb
      af6278467529ab06

  sequence number: 3
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d33
  nonce: 5ddfaaee10a4dfd0d8e1b49c
  ct: fa4e91f12655a69406b6508ae7b9fbbf051cc12fee4cf8dc2d3de22f2b3e9f509f
      7218b8907d296e1af3e607be2d1d66f0e4fc778f84825ab4a5f0eede6332d65f3c
      a5b3022db90ccde7

  sequence number: 4
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d34
  nonce: 5ddfaaee10a4dfd0d8e1b49b
  ct: 25b2f4ffb6c23c860f88eb97bc0f25059da15910963a4d4d4ada731f75ddfbde4b
      4b08d6bf140c342cfd266921714db083927442a2bfed5c56c45f8d6e48317579a7
      18b0ffc1590b3168

  sequence number: 5
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d35
  nonce: 5ddfaaee10a4dfd0d8e1b49a
  ct: deb2e5362bf1b325f3165239138a943f3fbc39b6a36ccb0e9bfe98d2321d6308a6
      f6c921fdc2776374bc4e967b0bf6d7a249a1b937e0d213f8988af8bd6601e097df
      66cedc9f07f7d711

  sequence number: 6
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d36
  nonce: 5ddfaaee10a4dfd0d8e1b499
  ct: b15d463193eabcfe25dac6980fc95aae379aa480b971deed85cc11550daff84bc8
      35580b71d8a37dc5ed3b40a6d392734206c8b31d5f15e70b4beaa046c90b545d64
      e7e66be53ad80285

  sequence number: 7
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d37
  nonce: 5ddfaaee10a4dfd0d8e1b498
  ct: 5307b7d16e86656a69860247fe9979611ebb3bd378f7950765fefd26bebe57592f
      c7544b75f88086b6cfb8f53dcd100d05026871e661d9e8c9d10493d486ae81f400
      f4cf7a52462ef623

  sequence number: 8
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d38
  nonce: 5ddfaaee10a4dfd0d8e1b497
  ct: 6f5839b9683dca37b52fdafd292385f80a70e6270724a11448702efca5ee48a474
      912e93896941074dd79b94e394ddeb04801ebf682c099ead1a210c485f654703a3
      5e0a72f7e2ce9847

  sequence number: 9
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d39
  nonce: 5ddfaaee10a4dfd0d8e1b496
  ct: ef220699580defba59db627f5a79811c434b0a79826511fe8e1a8e06ec47959c7d
      8821ebd7a687bf2f77740b3629c545c7569d6fb6c97b934ad23aa85d5552511658
      815c791e4386f493

A.5.1.2.  Exported Values

  exporter_context: 70736575646f72616e646f6d30
  L: 32
  exported_value: 74e80a263b1c880d6d71a7525e6ba39ddf1024e53e32765d91db49
                  24d44baff1

  exporter_context: 70736575646f72616e646f6d31
  L: 32
  exported_value: 697c3732b9b884d51d3a20ce3049cf29b5c34e19b3a9943df9d93a
                  59b505ef13

  exporter_context: 70736575646f72616e646f6d32
  L: 32
  exported_value: 0b65e43e2e6f95a7a1c524afb99fc78fb3a8b1faa22bb0c3c955ef
                  2c73018ac9

  exporter_context: 70736575646f72616e646f6d33
  L: 32
  exported_value: b3653c71602aaaefd5a664c2301e512268f2f20289e7f268c526dd
                  41a226a03d

  exporter_context: 70736575646f72616e646f6d34
  L: 32
  exported_value: 42426bda8927b8c98e63fddfa045a91db94d9df535f177037c7faf
                  8114eb16ee

A.6.  MLKEM1024-P384, HKDF-SHA384, AES-256-GCM

A.6.1.  Base Setup Information

  mode: 0
  kem_id: 81
  kdf_id: 2
  aead_id: 2
  info: 3466363436353230366636653230363132303437373236353633363936313665
        3230353537323665
  ikmR: 0ac1e0b6b264f0de171b33b9fea8b6695c06f46bd5f838fa29cbcae1c6ce1119
  pkRm: 9e61cbb1024fb5421dcf61263ab45a1dd7987f214991d52ca43b6592da99ea74
        6457b452d54c44adb90601b142393022d6865d5a04b42e7146d4a69bed3c83c8
        c341c4816f3408cb502568538aa52b6972e6cb1f227073f828481d187c98091c
        8b12279a382ba314831f98470a351eba6c7748821243a813f8bc3e0c126fe422
        c073a06f4f51acada064d0a8cff93655d69900b5924e32a17ebe97b61fca49f1
        a01c338c9f4be3a9150cba89259086b10184972fdd9218d7887ac706981a68b7
        d59ac333c4530b859cb9025b3da153688a2e97eb90dc4c73c7336c866525c642
        24ff5b8c7ee21dcb85af8007990b2694c184525ff0c019b4143dba13a6c78461
        696bb8c228444a9353b7776fe6a997f9bbbe30731ff7a9af746d78d88b39bb51
        aa4b8383103816338f1146707a3c07252553d50b54e3cca002369839d673050c
        0f69f6a3799b676f12b20454a0d3d1cf007d3ad9084145b18c4113986ab0ad20
        98c065b9266a8a015be7238abaaafbd564ea83ae4c238e147460b1268731d46c
        964c1af35a1d4ac56f1888334c73b7032c0e414a2ccbe43f89c1207d0cb25b34
        8790814d70a9ca2b44658ebb50aee329e268abc620a5cf74610fb1a1b551a12e
        5ca3f1c220da4a9c0b4657f09abbb9d01c8c5766941577328633aa36a2aa788a
        819a6ac5f864034c1a9609125849c72e8c6387ec1820929a0189a8c7fcb20424
        cf78e7bfbf84b2b8485266d260a6e02e615a4a8fec3467163995e4a0e27c0e3a
        c5b7715b87c016851ab335d2b34c487c6c4a6baf5777c979e134ec464e7c7430
        ff7514c720bd4b340addc04b71b083b445bc5f10953ebc9be7941e6700690fe0
        6e8d8a116b7096b08931771376ccd8ac6774c31d857ee5e309e30761e283ac09
        705864149c0ae4308c02864bd1b2190a1abce71f9a441dbaf3a87fb29b5d9734
        9ed84297d0951743323a9ca97f9b6de720349fc63c7fa50d352431f6dc964ce0
        9220939e0c8167db8ba6d97989ba204514476caac1459394aeed80154480741c
        813fdf60b5669c9db51a6840789a858c5df6d339dc86c2afca91815bb79488c3
        f21a9ddf432b33178956f374b2e4b01b6580f1810028618f7de42f4b52b266d9
        569e4c3ece4656b4f83dc25b7c7f05451736c8673a11a967500e9894fdba8535
        9935a60a234c955ce9f93b20c64f229c66b6784bb6968351b74f5724c0ff6ba6
        c8e007e2eabfd3c5563ce4afbd120b600509ca661b7b1609718c7ba18c790f6a
        731b07b917c78f44dbc4a3f81bcd70292986cf33023cdc40014c33012d0c8ac0
        580fff60c7edb5b52a94582be5822e745054831a7a1c4daf11030145a50c6936
        4a89c32215754fa77d0724ae92d00987252f19c5041304b5ffb835e9585787b9
        927ab496c3751bb4a80770f3b0eae62334f40db9830e8514483e847bdefb9999
        a08c08db3b8d9a82d7372ea54095d1d0a6d16415ec3a378e58cf88eb4198037a
        28353b0be221fe179adcd5527ff9bf3457121fec3b5fe642057b9facab0b0390
        3474ba50ce3048ffa20f6fe30618901c0a241fe4370ba8303e7a526681932ec5
        e980a3eb162c028ec7c939fbe3235e74b938d31321d7906b85baecd94ae3f915
        d1303716a924ae611c97c5b856551785f31fc5a686c6d8ca495cb353bb6ad828
        1cfc9913b3a396550c7aeee90f851ba9223b00dffb4860b6951d202eb4068b50
        a64fa0275d6c9c514e1140cc6339e49a83fe895920803bd8438df470c568a232
        18b98a488623ea9a6809ba0610e7ccf00195e5f204df487631d609e3f24a7637
        31bf753ba723173e7448c2025b4b60194d21cbc1eab61a346566e083db1a9b9b
        b259e36b5e7ce070e7414d6797a9b24c524436590db00198c136873a1799babf
        c4c87e30c78306f0bb9cfc440153734d33a8b6eb5731352cc4d75cb6f1b94c86
        54150a653f3c8f0eb160d8950b1a256e81859c6898a13f2472946927997a86bc
        858e41b5a84137caa9dc444a39314f993632ec7c21711e87a45c9a0739e0456c
        1ab74a4c00604faa601534978b260e631a10ebe2ae268ac31fd792eba11893f1
        ac28356808351293c717d0196234cc198de3c3f3086e08995adca62a24b69b9c
        a7bb53409e57c19c7bb9a062c80c56e67cdfc4c529355620e63a0d7567e14404
        b76a20494cda2bc2e53b66550dc99142a125b4f10ac9cb7fe990c6176bee2a41
        04d06403ae9d140541505c081727e95c2c794161df56c5aa10f40cf6b1aa471a
        9cddc4a8bc1b980955ec743415f38b4f72e2dc9ffcdf8240cad77957bd5965c4
        9443235e6dd97d624d561a6c81e33b0ab35ba0ad9a5455f3136b3ac590d1cfe7
        c6
  skRm: f1f10a30f20972ad29572652176e80ee17d2bd8a259e2b194eb05b8171a7f791
  enc: 3c7ac781a006bca477854486be194790689fe87d95dc180ccbee287619d392f84
       0faa8b3ef5ae177021049e2f7beb266ba6319b1019cf93b7693afde54ade2f9b6
       d5db36d98468322af21bdd0696a8f4ef0dfc0d234712c10626e251b2bd61c7568
       2e83a79c0a16ccfe9405ee8423fa8feb6008dbe9b2c0ef8a990bc15f6e5f9be70
       0f3fede382ca07302dba47d2a41f5495feca52fc0ec62d56e44f7b9765fb57e8c
       575c477da4be0743268d7c8cff1e5d10d3b5a6af2219d447cfcd7c1a818fda687
       873ca98811c6552d2d5ba3e0ceed24081516826aa35b0fd77b05563e318e1c291
       9f0f458850c6747d6f7ccb86cf7dee21ecf003bb7753ad345d98c2bfa1f289520
       8c2e2513fac654e5b012f2b62606fe1894feda99f55295a9f581ada452385e76f
       c78585e432284e4374d4472454dd68e14dad147592979b69c200c7eb7e4fda53d
       65d7c90463ed18782dfb592d897abdae12f0bae774aabbf89fdff8bdd9b6ae276
       7a97c6c8d6cc19612de4336b8012b50b7030b31cbfa5809404601aa98096f2b8b
       2512b0cab87bc8d261f83e0fd4a40dcd0258771d2484da0eda3e60cc834ce92a5
       bfd63eada6a9d0ea43df9f4740abcebc3999b3f900197e119640a86d8aa5b31e8
       63b5b0c92fca9b7c9a537dc493a70a8f19983eafb25efa03560dc64ee7860b789
       a8bbb21c7e5f665be4b33405943fe0c573205062aa83aa8495d603c3316aab816
       dc7c1e6185e5a1999673f461322898b54159d8b0454767aba6bc020b914494b61
       5a3a3c083d4d1ab568a635f7e3b67ecb7ed92a73c5026b218a1822487f30da0fa
       16885abf2af973a696cb7a46b0bbdb9c8e045e06fc81bb64464c50d1dca71f3db
       ebd191806194c690f2c16754248580373ba230da2e09d4a8bc5f886b0a53a1c65
       3dce64d3c02a962c5a8e929bcbfce673ad2428718e2564655deae6cae4e65b235
       c29e9ed615e8d4cbfbc3412ebd5cfb8b90fea91d96b355a1037602a30161dd9c8
       374b2a986fa4482991c1f33d02d505be3d496e797c2cacc5e0587f3ee5c0241f4
       30a9a0d2031373faa21533e34e03f230326f092604b62eb024e94fbb503df15ae
       9435f8134cc67c970204479a140040b461badf393e8d77c1a7562628df44f5f9f
       0e3b182307132764ae475b37cd3ee8e313b9630418c522bef06ea7643ccc5c002
       11073335fdbc084e3d5a142962f1bca66c0f638f6d13a580e66fb878782a8540b
       28fca9fb57300ea4ae561be3a2c95bebd51a7777545df8b93aed396e70135048e
       0a8bc962993064a8a3b8bda7d193dd7540c05841a8e3615d081e2dcdc26278baa
       da99d3e128aa94d1a99ce3c4c8e483e250409dfd8a41044db77647921dc2ce00e
       db27f5291ca273b82caae2abe8bfe290e7fa087f7b7094faf32b3b6fcdbca61d8
       902104e1c19f2d92e912cad7129c1d42936afa10f54b39a7d0db3c67f7bf365b4
       17cd2d8bf749d022bcec9a6592db43b06b28da0516e97b7ee7dd0cd9896a4030e
       cc77c4cccc8990d97514b43f132a5f8654f41599ac1004ce6e7a27831b1bc816e
       c4184bb6e023c12c88e181cd216670dd9aa779474d1b533d9908492922ca7ad77
       8eb27c009304abb6e9ce85d3aabc5a523729201954f05c5316fc530ee69bd502d
       428d76ed838705660cecf87ae7d0aba0f348270c2d77f5c16a5dce9dd69adb27f
       b8a0c4dc988de3002b3e6df34ca9674dce43d3654dbb5bf8d727f500729a7ba8c
       1dd65e9e8251c8aca6de2b7027f751735f63bfc356054ac989d05f13f93a298fc
       babe0ea42b2f35c53d724fb35163557e1da76d67acbd39821550f1d6289c6dec1
       a7040af912ce34b80e16bdcefc0f65ec6451b65c8a971c78ac6a9df6c2c6c2bf5
       42ae72038b43aa481ba99c47cdfd35d03f1119ae4a3933221ec8303fa7450fa7b
       27a69b5f2f2636776757d9cf02a167e387ae0916ab2323bf4a9468db125a88e47
       938d8d864ec556a2752345cd17ba7f6bfd5ec2d47bc598d9b4771b0f5b6cad502
       e65954b498d3afe51e541c50f3bc3a0a728d97f3398af83ed707500f8441127d3
       4a724317ed87ec6d47cbef9f6cde81b098181e2ef4bfe5ba7476d604bc05c98c3
       dc0ec6866ab5fc749552446028f630edcc49b1f24adf18f80f9b8f295c96c2900
       4b856754d1f585162033216df34e926fe59e1350123f429f9d6d42e62b1279c40
       9ddc7aca7f6774dd0464ccf6e1afab9943a483a6ea316f4b81a1ea11a3c1630c7
       cc22996bd975f0e870ef7a946da29c92e815ef004db3cf45eac7dcc4f3b52364e
       37ee2e09ec90a7022f709f18039f119140e02e919894a96a74f2a8c1c885c66c4
       24ad6f81263791a
  shared_secret: 295f5c336824d9726e2d92b0f6c4bbc689038071ac6a61bd9427d67
                 79e5ef3f6
  key: 30875ecda9168f62085985807a0792185babd2da480ec2ecf2d54c4fdab7e54d
  base_nonce: 9860c77b82a05e053d4a27bf
  exporter_secret: 8c9e05ea5fabd826b79fffb7af5024973728298ae7246b9b38733
                   3f5a26996cc2e203748fff2108dfaa79e71a236e1df

A.6.1.1.  Encryptions

  sequence number: 0
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d30
  nonce: 9860c77b82a05e053d4a27bf
  ct: 58d7c48ed3f702c537ee4329993917013a02c4bb4c6d859cf2a8babfcab3c1837a
      f507b25ac10909742c0b8aa5f664879b0cce8714ab264767cc258514e950058a8b
      9fdfbaf4d00c5d19

  sequence number: 1
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d31
  nonce: 9860c77b82a05e053d4a27be
  ct: 19d81fd364870a7e1d0749937209fc9e7ace7012f6497f68ccc380fbe0a39a8309
      d508db416b27335c0e1b3565b59d7bf00b68dfd1cfedcee3f3225a6edb52478ff5
      a6f0254cf61b4795

  sequence number: 2
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d32
  nonce: 9860c77b82a05e053d4a27bd
  ct: 764366be0d358ff54b43e609883fb83812692e295644606730978b0e1e9291f46d
      ea22e6a2e6c0fea485330487a4edc3a166ff0e7f0c0869122ddf6f15612dd3fd17
      c203ded1b0cb366e

  sequence number: 3
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d33
  nonce: 9860c77b82a05e053d4a27bc
  ct: 773980d14bad114e718a0f040d15ca433801778d1c6b16bc59029d759f1abdb9ce
      2a1249925dc4607a855015b3e5e812d03dfe5abb9724052985d5071cdb9b0193a2
      ef79b5644b80810d

  sequence number: 4
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d34
  nonce: 9860c77b82a05e053d4a27bb
  ct: af6dc202d8f066caa06db9982ce90172fe3217820472255c6fa2c5ba6b105b4535
      f4c7aac75ef9782d0397d834b51738beef8a126952066d42d931d72509da5939b4
      2b205b5a67413f28

  sequence number: 5
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d35
  nonce: 9860c77b82a05e053d4a27ba
  ct: c531fd42c65150792a4ad66a21da4171301c15ffd3cb5db85f3b745f43868c8e99
      a03ca7a2e966cc7770c4d51f019bf7e93784f526af31f3432ade1277feec6fb63f
      7fc35b99e4810e79

  sequence number: 6
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d36
  nonce: 9860c77b82a05e053d4a27b9
  ct: 3fe0aee6591dbba81516bcb614add1c2cfd9072a4df0b6cd58ca212606cdde8b1c
      b3d4501772f9f6a936ad39bb62e44d7dee15986995e2158e04467dee349dc21a60
      0c12c9922f9f0431

  sequence number: 7
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d37
  nonce: 9860c77b82a05e053d4a27b8
  ct: 8fcccfe513c0886c6177d59eed5000f6c1bd3ded70e2be70de011a9eb163186f01
      53bd7fed25f8b5f0dad1ef3cc72ed9f5866b4f90c96ce4a03262030363d3b851b0
      30d88bb7c40a33f7

  sequence number: 8
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d38
  nonce: 9860c77b82a05e053d4a27b7
  ct: c34ae2512bbc83e78d9cdc96a68ac456f3d8b436ccbf0aec3a6d06a7f5d5eddc2b
      73d830743eea5d13eb1f6fb0afd3989e6360dfd0049ad9f1c27c914bdd5fe4a60b
      46e4bdf043bd9ac7

  sequence number: 9
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d39
  nonce: 9860c77b82a05e053d4a27b6
  ct: 6931419b9282a4a181fc54209c9edefd1f4476ad8615d23370d9d1bf1ebe54a5cb
      a33d0ab63458a28c262b6f6ac5b88f19c93d43ce9881d7589e0e3c694c4c07f850
      36e1925d9c97e1fc

A.6.1.2.  Exported Values

  exporter_context: 70736575646f72616e646f6d30
  L: 32
  exported_value: 80c72970a944788041845d9e25708627692c7d3f0ecd1f4d5062a0
                  c279e18b7d

  exporter_context: 70736575646f72616e646f6d31
  L: 32
  exported_value: 2d0f120a1cc74193455f47271da31b149eeda334a84679596734f2
                  f9eef043bb

  exporter_context: 70736575646f72616e646f6d32
  L: 32
  exported_value: 5922cfa1078c62a13067495acaaaac8196e3014712e09d24a105d8
                  c851376a98

  exporter_context: 70736575646f72616e646f6d33
  L: 32
  exported_value: 36e99dbbdce27ce4a71bc6ad691ed0936d241732ac6dc644979cff
                  03f8eaa271

  exporter_context: 70736575646f72616e646f6d34
  L: 32
  exported_value: 39c659546ea345a8e45cd962403c27403886f9d5ad79614ba4cbca
                  74f9d31e25

A.7.  DHKEM(P-256, HKDF-SHA256), SHAKE256, AES-128-GCM

A.7.1.  Base Setup Information

  mode: 0
  kem_id: 16
  kdf_id: 16
  aead_id: 1
  info: 3466363436353230366636653230363132303437373236353633363936313665
        3230353537323665
  ikmR: a7fd76a516c362036444bcfdb2690221ecec758eaadb3ff279478d29fef19fea
  pkRm: 0466e73549bd3b77560153bf99aaff6657adcf4ac69c49d9e1645806ad13e7eb
        996ee704f53fa76ca2417f2a5f8846d260b399b0b2fb590638b74b20c6e42da0
        32
  skRm: aaf50bb090817310c6a9616d9f3ad0532114f7e3e649ff758c372afd41a5ac72
  enc: 047bf609c4e794449ba692975449c0a05f6bece9a113d1a9fc4b7024a03bda7d2
       8d022cd9c91530b45de3659189aba21d5144aea491c7edea1de1635d06589e9e1
  shared_secret: 04ea1f816264101eae8b7ab26fd5689e357b41fb69facb32303ec68
                 442277326
  key: 8148293af4d9ccb6a3ea1116ae1bbe7e
  base_nonce: 5055d867d32c17e6d5090d8f
  exporter_secret: d43cc0ab61579dfa14381223f62341df5309935dd0e031496c767
                   4e780148ad7

A.7.1.1.  Encryptions

  sequence number: 0
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d30
  nonce: 5055d867d32c17e6d5090d8f
  ct: 7dd7a425170ed146015596fd4276f4f180f506f50f9fc6ac38b817b03bfd62fa95
      ec802c88bca05bfeda130f35f4f0a3e15c982f91e49747ec0d274fc2ca97244847
      e5e0c5d5d9ebbd84

  sequence number: 1
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d31
  nonce: 5055d867d32c17e6d5090d8e
  ct: 3558cfc695e0997fce70179f6cc8cdfc17c310bfe725582f0d6446acc2b8d4d567
      ab0543a5b450fdd1fff5c41b8fe883a4d2cf1655fde11007df070c6509ba4678aa
      8b940660aa631176

  sequence number: 2
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d32
  nonce: 5055d867d32c17e6d5090d8d
  ct: f52759ff0f3cf819ac14ecd25f525fdb8e8183680c7e10dfff1fbff9004c745b1b
      518c5794547298713236bd122a1d5817cb0d9fd7489841d5ea84e60ce7dd0594c1
      37ca7d888b1bbd30

  sequence number: 3
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d33
  nonce: 5055d867d32c17e6d5090d8c
  ct: ecf73a896c94cfdc906e3e51a5ff5d4ab74afbd8a42c0d7237745c16bbf60d1551
      70ad798cb79ec9bcced2ab110e03640cde0bf0fe7594e514a640d7ed34c9a0768c
      46a5daf00b370302

  sequence number: 4
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d34
  nonce: 5055d867d32c17e6d5090d8b
  ct: c2d5c74b133d7cbc3fe4c8c84fa41ca41814a3ac89f9ff7101d3ba1f607651f4b2
      4c3fe6fb4835438f7d0657f5aa5ca6282d0c24f3d9af93e456e82891adf1f959b0
      f80cc680695aba5c

  sequence number: 5
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d35
  nonce: 5055d867d32c17e6d5090d8a
  ct: bda4490582e7051dc22577587aa9745aa88024ca6d0b390dcdaabe42992475c226
      4b512f67b0146c711cf2b01c402d7756dfeed03429ea661f38d6442363dfba5f62
      1b36a43cd917f21c

  sequence number: 6
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d36
  nonce: 5055d867d32c17e6d5090d89
  ct: b24a18706bccfa169174a28f46915940d23a3840e08b572552c8156b76bb303f79
      2ac375f03d8179cc1b99101fbe37a3b7349eab6702f803c23fd89f42208800a3b4
      c82d38062226c822

  sequence number: 7
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d37
  nonce: 5055d867d32c17e6d5090d88
  ct: 32eb0506dd5254921bd2bd78eb3c45df39acc49622093fab57cbffbfca66a80825
      c64136af6694067d659615ba7a94ccb7139f05b6c09d068cc9b9643a3f9d492b8e
      2c579d6d24fb0641

  sequence number: 8
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d38
  nonce: 5055d867d32c17e6d5090d87
  ct: 2206f910f3183a707018848108db1af71558e74a370fca7a444f7721d0d312e181
      0ce6ed9628222bda44d54c7561c1dc439cde4ab3631dab23528af2b212701261b5
      7f02756ee4279c2c

  sequence number: 9
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d39
  nonce: 5055d867d32c17e6d5090d86
  ct: dafbabc8c9f3729bad9f55d51da0c93b97943641672252181ff0e7e8fc4362a6c7
      81edf45b1c4457e9bbb8e76c789fa02993b39d7fafbd76a36fc16b2ad118b9d393
      62ac41960a9889b2

A.7.1.2.  Exported Values

  exporter_context: 70736575646f72616e646f6d30
  L: 32
  exported_value: 6c8d18456476bdf3d7ad7e3e714f27a4cedf6918c0084541cfc554
                  fd24df689f

  exporter_context: 70736575646f72616e646f6d31
  L: 32
  exported_value: 6aaedb9b733dfed62e801dd0b98ac96d51aeb550fc7242835040a6
                  194b2da678

  exporter_context: 70736575646f72616e646f6d32
  L: 32
  exported_value: af32bdf3ec4f880056897abd9b370bf33655216ce09534a991a955
                  6c5041a74a

  exporter_context: 70736575646f72616e646f6d33
  L: 32
  exported_value: 894d66236051daca86d63aef0418fa1819b956693780fe7f0b0b89
                  78631a7a1f

  exporter_context: 70736575646f72616e646f6d34
  L: 32
  exported_value: af90e62c885209b6b096b7c6cac281f6300644baa8384e48cc5c31
                  fa86687253

A.8.  DHKEM(P-384, HKDF-SHA384), Unknown KDF, AES-256-GCM

A.8.1.  Base Setup Information

  mode: 0
  kem_id: 17
  kdf_id: 17
  aead_id: 2
  info: 3466363436353230366636653230363132303437373236353633363936313665
        3230353537323665
  ikmR: 8f51b7b6c1d043bc3fa3ed7a634cf506f8b4306874826ee1a43a50f605e6c258
        37d683d0db0f95491670dd4af71f37e7
  pkRm: 04e31383ea4abef5358ffbe602c13ea7d6c906c94c32af863a08dde6f6247bac
        af32ae43108c34a05799dbb101a3311e0acce749a10eb5976629fb574bf9fa8f
        7129fd91fbafd1fe0e1a36cab2969d2d9f598abe586668ba4116ca597436de19
        a5
  skRm: 8970827e22fb4858ac58dc874bc7ec02a171536b89fc0f9ac268c2933c935bab
        f27dea033a71ff11fed88f496a50d8e2
  enc: 04839b259c8318f1f37971a0f6b2634581c4f981c1d93e5bcc2dce977389b23ea
       39aec3845f5f9265a7632d18914b63f4dc5d21a6b8674d52711a69368a42945ae
       9a3f101f03847d64333648c03999cb54ca438892496d808cfaf2194390b025f5
  shared_secret: 3e788110069ce163aedf40839e5c0affbde08a0f739573ce2fa65b0
                 5e6a8867b4b9f746ab44dead83f7573a5c176e065
  key: 8e420c8e053254f46b521463478087c5fcc7aa73379854ca76cbe4d0b0133fe8
  base_nonce: f1f6dfbdd7553b6e11300419
  exporter_secret: 88763b08dc5fb36bf081c412d9f157fc87974eae220e0398a8406
                   0338e26a7551f399a7656b12435994a9b039d47f6b4f6b7c378e8
                   6b118450e43eaa9a9f980f

A.8.1.1.  Encryptions

  sequence number: 0
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d30
  nonce: f1f6dfbdd7553b6e11300419
  ct: 8ae5aefdd44f9458890db14dd61019c262744b44a6bee6fb174535c98d683afa3a
      c391b7c81ee6e5c87f1c58cc4b50b53c4cf260223cff639c6c3e3215b794ebd6e0
      c689ab622d9e145b

  sequence number: 1
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d31
  nonce: f1f6dfbdd7553b6e11300418
  ct: 039d4d4aec84d7c3334cf5541eb18ca7f150a04d80f54322898ec30651be8e3ed1
      9cc8c8df1fb0ce29af73d1f5162048caa9e026fb45d24b551817117c61ccb93f60
      26e9386ef7dd3f4c

  sequence number: 2
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d32
  nonce: f1f6dfbdd7553b6e1130041b
  ct: 54ec7f08307809f01fdf02a1dfea4deeac375de5c75bca57e8c2d4802351064f9b
      79954546ca91413aa49844fcc74f9037884e946c8abf720c567e264b19cd246850
      fa5a085e01832e74

  sequence number: 3
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d33
  nonce: f1f6dfbdd7553b6e1130041a
  ct: c629eca609e2138ba7f6be17a98b00110dfe2cf61939587002793bcb2b431cbfcb
      4b3a00ceb6de9727d7d11f37a4ceb7514177e631911dd5010050f87d8658612570
      469155e06315e353

  sequence number: 4
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d34
  nonce: f1f6dfbdd7553b6e1130041d
  ct: 3a8028856e82a11131be5bcd16b68e844957b87521c5b2bffc22f0bfbd9530dfc5
      c8a7c3329b4979ecb2655f68c73e514d4a3612382b752193ae77d7af0d034196d9
      b65bf4a5273be0bb

  sequence number: 5
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d35
  nonce: f1f6dfbdd7553b6e1130041c
  ct: e45f30fa2c40b4c7012310c3a922ad006925a84fcfa03e37980ba4b934fb3ffe67
      da7686035e9581c282762fa2e6b3bbccf69e52b5c07228a4a57fed01f46641c7d5
      8f4688b45714dc15

  sequence number: 6
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d36
  nonce: f1f6dfbdd7553b6e1130041f
  ct: 1d82effda9c252e242e0f28de57407bf24bc37c39096d1f7f258b297ab4af92af6
      4ff8e161e5545c8f35c8bd864ff5b562743df6f06c782599123ee75b50ae5324b9
      f360ffa559554c49

  sequence number: 7
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d37
  nonce: f1f6dfbdd7553b6e1130041e
  ct: e51cdd4887f55c4e58541fcd68d783845d39612852bbba0fb68891f86812d0cf2a
      1c1bf4924ebbf879f07465f7d68ef0a706b1071a1fbb883611e9f72139bfea6362
      025517e2a5178df0

  sequence number: 8
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d38
  nonce: f1f6dfbdd7553b6e11300411
  ct: e4444a038a275cf90e231d899444bf40be60e668c9a78bee4a2082e621446ebfc6
      fad989196ae383233db2ed95e5b43f94f8f2fcdaf488f4d81e6ef6c06cb312c8b1
      a0e31eec304d597b

  sequence number: 9
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d39
  nonce: f1f6dfbdd7553b6e11300410
  ct: 5dbd05ededf89d8eb21e87bd63841a4b6fa4d9dd39a58d0076a5d321b09ec76bb3
      92ea18585a6556596ae95768c4028d0cdd52f12296eac1fd9cf2a40021f0146394
      65c4c5d3f0f777fb

A.8.1.2.  Exported Values

  exporter_context: 70736575646f72616e646f6d30
  L: 32
  exported_value: 2f37cd2b477ea838ac23f1ec147ad875febaa1dd6d40f2e6f8f8b7
                  f1ffd83aaf

  exporter_context: 70736575646f72616e646f6d31
  L: 32
  exported_value: 5739f7c71e13054582deb5f36c1b492a1716597ae85e9bcb3b57f8
                  fbbd7cac20

  exporter_context: 70736575646f72616e646f6d32
  L: 32
  exported_value: 5e42175487a19530d1526ec95a1495ddc3b84c65beb59e1af2956d
                  6dc31c64e0

  exporter_context: 70736575646f72616e646f6d33
  L: 32
  exported_value: 0ae95a4fa9fa5e65bc8c4ec3215ad92b628b10c8aabd39d478e0ed
                  e1214d6ea7

  exporter_context: 70736575646f72616e646f6d34
  L: 32
  exported_value: 4dae3c1cb648e4ef417b5234a3451a7afe5db3b97759312cdaf700
                  ebdb921c02

A.9.  DHKEM(X25519, HKDF-SHA256), Unknown KDF, ChaCha20Poly1305

A.9.1.  Base Setup Information

  mode: 0
  kem_id: 32
  kdf_id: 18
  aead_id: 3
  info: 3466363436353230366636653230363132303437373236353633363936313665
        3230353537323665
  ikmR: dc20bda0ba90accb76c2cf8ef6af44c3f21bfd60884cd0f502459c48cebc9fec
  pkRm: ef8f6e2fdaa8dfdce94c9e02aef1714c1cd80c0a1fde4977aa57f4d1b77d5d39
  skRm: 9c42767aaf46eb76c3432f8ec5d7a5e4730dbdcbd336e55980124b01c4ceb279
  enc: 16881517e796589386b3af6a47d6273d7f31bce93ebe4ba5f715d288a9781729
  shared_secret: c2233acd6db9f7cfc6e65098b5b1f755fd3f42a94e7e8a26e66bf03
                 320727d41
  key: 515da1c0a943594c2f9ffd5f09029c3254ba5ed8563108a8425fed0467f6be59
  base_nonce: add4df506db477afe9e0d01d
  exporter_secret: 85ee7cc2542f4a44d1ed595ddb3203336b8da8caa9d7e91314595
                   6e8ad7ed0e4

A.9.1.1.  Encryptions

  sequence number: 0
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d30
  nonce: add4df506db477afe9e0d01d
  ct: db1eb8d49ddc1055bf036b8571e865347905b028bbf5fc4e805a6245ba2258ee6a
      44ec44898ebac911cfe9101730b7ce010f7ed44764163b28fa5f2e805297a467d1
      b3911d234556e0eb

  sequence number: 1
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d31
  nonce: add4df506db477afe9e0d01c
  ct: bc53f3a9dc0b0cd3b5d91da56730f393b34ef7287d7d4472f83aec64dbf18e8d49
      c46e097e2c001eda6595249a95392d2efb882c9e0fcf36c52315ed593ec90bec06
      6397646176be4bbd

  sequence number: 2
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d32
  nonce: add4df506db477afe9e0d01f
  ct: 330d90da5501c07c4748cd294d5efa6d39c3465b4725f69cfc68c4e5af1d1eaa57
      46042bbd609eaa11194b4ff5c006391ec6ece1e06a2f6f78740a5e77b5b81e07af
      c659dc77d5324e3a

  sequence number: 3
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d33
  nonce: add4df506db477afe9e0d01e
  ct: ed353513e6992df17d459952e9f542301d8f49a9b01b0cd38ed349cecac22196a2
      bca5d309806cfa28c709a91309b4811e0969220276527d92a5de75a26a9d7ffa77
      3ff504010bed60c0

  sequence number: 4
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d34
  nonce: add4df506db477afe9e0d019
  ct: 023065b5ec334e23c6c868b7d6fb924d8d02c79f3428fefc902d634284cfc0a720
      186cbcd42ce2087125938817d76f6a993f91b0f03e219007bc804202eac2a48080
      c29f60f2cf7b52f0

  sequence number: 5
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d35
  nonce: add4df506db477afe9e0d018
  ct: 45a70360fa9b62de65ddfb834ec16523b031336dbcfad3f9a53217fea04673bc7c
      fb60c75913f0d8c7104a391ea4cc04e7656eb5512c0e8697043e59993764f59273
      b13f98f658d0bef0

  sequence number: 6
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d36
  nonce: add4df506db477afe9e0d01b
  ct: fb0b5a138185c14b2359e3ab40491db47de4febb548983cf3b1e0058c3e089f32e
      1712aa001418c69c15a1f8b511a278e51fd0285dde803782c48ed0e644e1541bc3
      95a2906de8b60d8b

  sequence number: 7
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d37
  nonce: add4df506db477afe9e0d01a
  ct: 7a3da562afac770e456101d8747eeb97d83d8b38657ce789dbff00afd716cd6b0a
      7cca62981ab60473840cd5532f550b96f4ac9425785b570b290bdf9d8590c3fa6f
      bb806fdcb20ebf9b

  sequence number: 8
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d38
  nonce: add4df506db477afe9e0d015
  ct: 4dbce315a3acb5599c55345b02e7563f9d729528e045bf2c78026cadb76b86e5f0
      1b86b686a31e6008998fde761823fdbb152631b376206fbba038065e411204caa4
      ff6788c9b047eba2

  sequence number: 9
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d39
  nonce: add4df506db477afe9e0d014
  ct: 08f462e26cfb43ffffc9bac6e8345641b70dedbff333b030cdf068ff664eb68026
      2f595911de584b896f04e9dc0c1a800b7328d38f04966ac0372cc34d60080568d7
      4bd66288d2c3de06

A.9.1.2.  Exported Values

  exporter_context: 70736575646f72616e646f6d30
  L: 32
  exported_value: cb0b6502e374d2594ed5f8787625ce4541fd4908b3121341e20c12
                  4d6e2330eb

  exporter_context: 70736575646f72616e646f6d31
  L: 32
  exported_value: 611c82773c6cd693e24b9039791661ba50be3ba679824b2c919a85
                  96e64c589e

  exporter_context: 70736575646f72616e646f6d32
  L: 32
  exported_value: b8d5e13a02b55ff62601b000904ef10116f77e117fbbaa1870c4ba
                  0340580b8e

  exporter_context: 70736575646f72616e646f6d33
  L: 32
  exported_value: 3fa653d07a25986918a6f5c032464ba49ed7e7dc9e6e0c931164d0
                  9aee06b988

  exporter_context: 70736575646f72616e646f6d34
  L: 32
  exported_value: fc4787633bc77513c5ce119d716184d1369c94598b48aa0c420e2a
                  6c61f1401c

A.10.  DHKEM(X448, HKDF-SHA512), Unknown KDF, ChaCha20Poly1305

A.10.1.  Base Setup Information

  mode: 0
  kem_id: 33
  kdf_id: 19
  aead_id: 3
  info: 3466363436353230366636653230363132303437373236353633363936313665
        3230353537323665
  ikmR: 68b98ac8cb448ab708201dbda774500d8a60a5a78445e628c3084ee43575db53
        70ea9d09a93f6c81683d2057399df83fb4d6aa6a848669e8
  pkRm: ad40243d93eb1c8e9c4e0ac75344365d138c560fc9d55cc0af77f9ec354f83d2
        51c650188b67031d4bad75e2aeb375ea8cb1bbc1df888c8c
  skRm: 74970bc93b6b47ca260c15ddf87f0ef7bd7856cf99cd4896dd30c8448ee0d6a4
        97c78754c6bd2c2745f5da3d0bf395fe2e53793c262d44b1
  enc: 1525ab8ee0687468ea1e4c5904ee1d4d274176d2e5c375dc5b8ef9ddc6999da2e
       8925c42bb30d064afe4343e12512f65a210ddff3efa1fbf
  shared_secret: 19f9b9d4c9651b775dca8458b77e43388dbfa3bebf7e0264d843fcd
                 7356e73e31962eb6e8589ab9a110d19e457c480a8f5f5da81e39a6e
                 b1d563abf10a484f7c
  key: acfe385ea5cc06e8baa39f688957ed69c076c3d8dc11a0f6d8cd38c07ff19356
  base_nonce: d66dbdc61ce293dde7e6fd55
  exporter_secret: e0a5bf27409e978f82885767ba5d08690c9ad3947357ed5b9c536
                   fad0fff678924f223cbdb4c80d1b8bf31b8fb7b344d30540d3619
                   e09f830ff03c144e89b478

A.10.1.1.  Encryptions

  sequence number: 0
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d30
  nonce: d66dbdc61ce293dde7e6fd55
  ct: 66e7172da145177b7ab4d509c51ba797da0a55833ca7990cc61fd87ed123eb466c
      df0708845b17f87aa37fd55fc04fe41f349232add1e69e81dac0bdd87d218a82f1
      f53c01f42e94aa70

  sequence number: 1
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d31
  nonce: d66dbdc61ce293dde7e6fd54
  ct: 338963b975052d9272e78efa775e461a7d83757c2a72f33dcc031bd1cc064b1fea
      4fc36badb18eebce87a2ab33fbdc962f8808a16fb9e507083a020f38099ae69912
      db44111d8b669068

  sequence number: 2
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d32
  nonce: d66dbdc61ce293dde7e6fd57
  ct: 27c4db43a0f33b789d68352e8a6c9c4321aa81a4162c274924f5adc917f3a66da2
      f1ee368af4ad23dfebeeb155c96d10ac007c7ff60a37bbf4219053138c5f337fb2
      06c3088998a38f0a

  sequence number: 3
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d33
  nonce: d66dbdc61ce293dde7e6fd56
  ct: 4017721ef2415f4dacc2947f68c634df13b733afbf862eb8c637d5aa14feadd2a3
      05a6a9434b4914190b552e5d94d7c4f50533d0448fdb9b035e1ceea51f9e01e807
      408b5ef4ea629d08

  sequence number: 4
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d34
  nonce: d66dbdc61ce293dde7e6fd51
  ct: c865e2e84ae0d4f34b1652eb2e04bdb3add6f659b9a5bd251208c398e46ccf6037
      d302a683a8473da90dc61fe2562944cf9ab7cc955bcf971f8dc831d580f858dde8
      54c84b2e2e91ca7f

  sequence number: 5
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d35
  nonce: d66dbdc61ce293dde7e6fd50
  ct: bbd8691906d29fdf36f61a85397a73ea991d100b6b479be58512fb8fbeabbb2157
      df061705feba2c63e4e0867f0317db4fd920c900a3715beb0c1d49fcd6dbc2a331
      dd898dcd8bfcc7c9

  sequence number: 6
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d36
  nonce: d66dbdc61ce293dde7e6fd53
  ct: 3782bd8ad12af9b88b56068f5763edacd19fd86e76fd2c9907c4fe7e0cec15840e
      f5fbe5aeb7c238786c89a9b807259246e3b662c34844125bb6c926dec86a4a9114
      49858d00695d35f5

  sequence number: 7
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d37
  nonce: d66dbdc61ce293dde7e6fd52
  ct: 09fdca1fb6811f62f92c846f42c08c9a24aefd61be882598f9fdb127f3e6ac71f8
      f33d8289a787e076912616b2592763b36075f7b50984efc0d30a1de4616ad2483c
      7fad2b51f4c239c7

  sequence number: 8
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d38
  nonce: d66dbdc61ce293dde7e6fd5d
  ct: 92767e6bb671fdcca73dc06e13c04aa04bc3d9d8db6d58861dcc63eb12205a79cb
      361c328fb0b70251e7023d0d0b9bfbacd9ed9f5c8e2c3862f53faad0f2b49983c5
      2763c120b49439de

  sequence number: 9
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d39
  nonce: d66dbdc61ce293dde7e6fd5c
  ct: 6a2f40cb89b98400183bfab1c18a72892066524ac1186fd19e24df505f421ad830
      d7f2339cb683c81b2133f765a17eb5c6eba734ad43d57da547313c3740a4a7fd20
      47d4a71626f3f38e

A.10.1.2.  Exported Values

  exporter_context: 70736575646f72616e646f6d30
  L: 32
  exported_value: 294aaa547f92a75388115df08f5ed0e71ffdc775d179b594038023
                  17a890422b

  exporter_context: 70736575646f72616e646f6d31
  L: 32
  exported_value: abf0e0554616c30e3db681486c7f9cd5cc9ee5ef53fc42b6a213e2
                  e4b5b751cb

  exporter_context: 70736575646f72616e646f6d32
  L: 32
  exported_value: e2a65d82c10d6cfba493458fab961eb200c9d8ec46659f39fa9b23
                  955c07d123

  exporter_context: 70736575646f72616e646f6d33
  L: 32
  exported_value: 4efa1e5d10d96e7739701f475415425ab96dc7b31602b4d17e8c71
                  f4a6be053b

  exporter_context: 70736575646f72616e646f6d34
  L: 32
  exported_value: ae05af65dbb4ad6ad4980de206f2697c9ea85cade602f232bc0a4a
                  79e361ca1f

A.11.  MLKEM768-P256, SHAKE256, AES-256-GCM

A.11.1.  Base Setup Information

  mode: 0
  kem_id: 80
  kdf_id: 16
  aead_id: 2
  info: 3466363436353230366636653230363132303437373236353633363936313665
        3230353537323665
  ikmR: b5f7219caa1488cc677386064255e6638f60f66d0ca90c8510aa46e908b92fea
  pkRm: 86402706266c010967751a03f6fcaec78162a3160eeba56332c275ca139e1de9
        aa28820979566104a89d44e389b5ca0198b6216ae216c8092dea727af816a45b
        4367d746cbadac0ec2740bc94092cb694c50c18a63c33e000c4ea01724f32646
        20f3cb9564a56f1254e6a99b27212ca701281677c1030c15a11629ac8b82fca9
        6104124a74164a17a9385dbb22ee758e7c58bdf9a0420bdbc18f8044b19c77e6
        e88bbec43fffa6600b14150cf83c62a98cc46c95cca4c2b0121ab95a9a552111
        0a0a18a554cc5027761a53641dd087550b0a34396d8e9a0dd81549df90babc79
        83b309460dec9b8252248c49a50c79c6d2015c8b288cce4759d864575633148a
        643cd014658a6b7303262d7904c190649a85e69f5c173f1839c208911bf02314
        51d3398fdbc55329b250261eaa70898f31a9b027abcd4c057c617827d247ba18
        1f7cc9b435489eea803656765737b7c56015af4a7cba4fd5bc300c0a92a24d0e
        e74aed3495bf36a37cc0ce1a0762b0568748c2b7c51c8fa0f0aa7ca590c0ea0e
        fdf00f1c7476bb7a0fcf7088b9cb7bb2d21151b96b8288030cca55d41abbce1a
        59906293f8110b5241431d71a371706d07592f9ac47e2ec33f18a4c41c8b4c7c
        a695c4665abab6c529565479313220e18797f80af5f64444d939b0f1161cb091
        ef466f3e04bae3c9b1d5e0af8d9c733b0059bc42cbaaba9774a7b74945968ae7
        b0652b5f6e9bab39e341fdc8641e3c65736b415138342bc593441539601aafef
        dab23332a16fd12e146b6e6bbc46eb1666a608786e764b7a2a4ea033ba0374cf
        a9919f383c9096d72619776f9a158f39c318d90462b58c9bfe6cb4d3b252bde6
        1f9ba753c1b7b52825473a51a5719c57969b9c10cc4db3361de3f004562c3565
        85839c634b4d06a41396951a66a43c98cb235636e24c9abd2bb5c217c1a67065
        cd062cd883434622afcf50a1bde7ae1b9a134002885230830c919d00507421dc
        7e21051a8228674fcc489bd3af29a870c5db5ca3819ebed5c0a432699b3b9338
        1665b1e7bde9c579ff907cc622933db22e5dc826699308349112ec87046fb051
        7b503033e7a0a00643bdf60e786cb74a63683064667bb3734c4766e652c15673
        599a867c9dab4f3d827d926609055aa8fc870462691eda085f0c2ab171e23d7b
        982610797eb8ab5f00da80daf9ac813a38307a09e42640a6a75b6baa9c1b3079
        3a513d8593103694216a6768063a9c55037c739193e9f70d911b0806c9c32044
        2ddc357c16457b9f2459a8724875539945721ed87801e72308a8ebb383b324e7
        da0fc4105248dc2a4064131fe5120b3a9ac6f86ac428b7208887774a3f532125
        37191b6096b776c0ce175862b5fb545e66ce97664ef9f3071b476f3b70c27b74
        777e95953851b1d88a59f0774387588edfb7291a630f09f716084acd6713c5e8
        a579c4c6b74a93a9eb35ac491405af6a595707b178904340a80273c454023690
        c85b2f508b5a988b9eecd8143bc3056626212accbd756057f5d998bfd172e022
        b0df085852f30ac57584ba9190ff3901c0c77e5e7c3f94f4006d700d9082bd79
        b0a280b60d6efcc142eb65be80050c0a753779b99b0183937b418bf8010149bd
        84ad2ce420d5c33624fcbef2d0036ea77aa6eedaba3c3e2352462361dbb60484
        04cf06ca698f8bb23dc71f601251990cb32b4a3e1d54b153462669752d12e4a9
        05f82252fd9cc4a92ae90374e911b29aa544488ec5089d033e72c94292f198f7
        91
  skRm: 97981e2761ed8ee8ce18b516d9b677fb13466f123268abccfc1cf2974fc9ed7e
  enc: a6c234b8590d0eb310f48bdb90dfed980ba6efd4134ac8e0bf09eb9a6b9ab08e6
       03882e58b5c4edc9a474a8f65dd7b5c90fcc9883e055b4ea466f085f75e528c7e
       a0006ba6c2b68678b233aa7dc73b3c4542ba82f05852ae7c92e0749f2f99a79a0
       6318e9bc71bfa15fe38252e5f309de0b7ddc7f408046ebef97c7310503505910d
       92bf5b6c3709bdce5f4f9434c32599798af171db99435e94316ec027e2e29ff39
       85007e0b81941cfc37cd4623e3c2a06f3761699420dcd4d99b43063bfa91e2436
       4c8b81ae2a6c3e7eb693ac52d5e29c3db05fa076f14645280453a72508e068a80
       ce5e2dd8fc6f187dffe96d3822b5269116d3c86e40135518b4890dae0a862e782
       642f3f5f3340324a4319451aa1fbd4c438c0b742151a6ac553b0be542f594e6f6
       49895b87ebae9151ddd99f9eeb4352b04343bf83f7dccc5e87917f3d9f1691f85
       381bb923da7a1e32af7743960398fff21b924b3cdf165517b794c399368c48cda
       e947bfadf5359f54a41ae7c94ebf11bc4754973471edeb8b8f4304736f40ba1b4
       43bb7ede23b6f8a1dd7b39e6061bf24325af854783984126565121e0100249c12
       3c5ebbd38e6c77dac2f34912493e800619d49c1d5a661b57bdf2eab69e6bfb434
       8555e984d6c273c41892add8f84ddee96a61ee0f01d17edad5634b9394b2d7768
       8e4e483c0c3181892abea43e101ef8144bf43f9e188c7343ae2de211ed628666d
       7a9e61db7c17db02a6a640f74ec56c5923c43b95f72bb313586a8454e810201e9
       d6ff0ce16c598d6fd2c1c6a2c73eccb0bcf81382c5737a6efdddf55a6f1d3edbb
       d4d4dbefb0885299c30dfe2cb93fe926759a922e6367d9c3b9f14484513ee4547
       1af433150357cf91ebbf3e09a1373c1392be2a117cade16e493201e4e359193de
       9cf49334b3d14cf0f54c0f7c3e6619e23a406ca9127bdf60c6efb2df47cb6d7e9
       bef5c19b39cfcbef7ea5683ed8974bb6eee2d4e676c3a37427990b0e70a89f127
       365e1c940353f210561bd0c2cc957378316bc38e4ff7d82b731c72a7655e4fc67
       746bb43241a481ee1f1d37f03dc092cd6d223225488b10d89a39a8578caacc581
       267f2bd827a51a4aba741a2fa485273a302bc953f73ebcebc31a1f8403946eb4c
       72659d00f56256f8868ba18e01b435e0e5bcfe573e9a951093076e7d38c955961
       6c2fe85ff3e5480c81121acc1dba52c0f6a84a8f04fb20a4cb318320468798a52
       740fc6677a2515a85e6824750584f76fe60e874fcd56f94228572d75d9776d06b
       8af10875958fa1c9fb338cf15480008228ce4ffc65f9989c474e11d5ce8e7f2d0
       e08b36a5ca7483641305cf13b44d25848acfff9aec140348955843b270155bc5a
       06c294e3b8851ed766a8c82782c003b8190a761b725eefc880874fa9ece5f431d
       459c0c9965041ed6ffe45884724d81dd9371df2cab61402762017669e0bb8e7fc
       2a88cb5926c7ef3710989bf0a9f1fe57432545b36f131195c2c7550de7c763661
       a29887ef32163cb7be0db850e4c238f044cddfcf2b63c511502150c1271ef2493
       6686161e2b1581f9ba9317d9031f9f6212ea33567ce6c24251cd8de20494be772
       dedceb91436a749119727d373c220e7
  shared_secret: d429a36ef033a91f0d903b5bcb0b1a9c7e35ab0f071cce04e8e46ba
                 60f5a1d44
  key: d1f04c59d173d7f0c6b0453ebaf8310b75ce26028dbb6714283a8654309a9905
  base_nonce: 0e06b572ff5668e108569efd
  exporter_secret: 60ae531b37a85f374827b7c1a5553548d6bdff998ff949d2b7a2d
                   f58dcb42ad1

A.11.1.1.  Encryptions

  sequence number: 0
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d30
  nonce: 0e06b572ff5668e108569efd
  ct: 04fce9b3e43bb7cede542dacf54e08ecc47097a30cefe707c9d8fbdec5f67ba331
      21a0ffed0a68abda27a8b536d7cc5dca6fa8e493c3e1c5106541ced45e52c8f69d
      333b0fe82121950f

  sequence number: 1
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d31
  nonce: 0e06b572ff5668e108569efc
  ct: 1a4e0ffc70cc4d32d31a782c4d053c50470bc9f3a260e687ab9ba87122879e7fe9
      0d39382d80431a46c9ebfa7243e8a734eb58896da596a93f0e769b5ae918852574
      4ab070f4b55c8dc3

  sequence number: 2
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d32
  nonce: 0e06b572ff5668e108569eff
  ct: 8b1e7cd26e9e2ee87c2bc080a8406a71991ee71245317e2a0a723f55539b3fae0c
      f0eae18541773f165a4ff9e645fe1e15ed93603676e9991e499d355285cf7b8d64
      6ad082129d70b8f4

  sequence number: 3
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d33
  nonce: 0e06b572ff5668e108569efe
  ct: 73198cab9cc0f3ecfa00b0ff0fe669ee8f1facc18f81d4d10d486510a72f49ed8d
      9452314e56022c5d3a1f17f86fdc718de1f1da0fa1c263f324892c87c12005592f
      ce57e903c71a99af

  sequence number: 4
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d34
  nonce: 0e06b572ff5668e108569ef9
  ct: b9eb8d6ad364db67cc978a92440f1dab5f7076363ead4ad4f8f4fb7036689625f9
      4fde6b574daab8186d5d352115f664ffe947f31d55361351cd228241d3bc48e8d3
      d1a7689e67b6477d

  sequence number: 5
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d35
  nonce: 0e06b572ff5668e108569ef8
  ct: f9407ba95c6183c23ba2a046049297f7fcfd9b7f291274f8bf693ff9221d90f8df
      a0ff6c4b1d3f98432819da62094003e7396cfbb396ffa76e2131d8c8d181629dde
      3b165891518f91dc

  sequence number: 6
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d36
  nonce: 0e06b572ff5668e108569efb
  ct: 3fc68c9b7b31938f47d730febf38394c595afb19e5a42a776570fc1c66e0c42042
      ba546d45ca7da97ab3dbf86a0626cb159472f212af91a82e2c2d250e61b5d0f39c
      16c728953bbc1ab3

  sequence number: 7
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d37
  nonce: 0e06b572ff5668e108569efa
  ct: 3c23e0b92c2bee04d35649990e1a99754eb937ef50e71e097f020764e4410dd8e9
      aa44e484b5e6c62e8514cd4d0aebf48c45b08819f88425f7d1ec070a923683da45
      3c7b2d425d213c63

  sequence number: 8
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d38
  nonce: 0e06b572ff5668e108569ef5
  ct: fdf95a33f922fca1f1c2aecf70c1318eb4732e89dc54f8567cdd69b0a7661b2189
      b31a64b06a5c423b4cc78e4106a7d3bd30da7a05a9694ad6ed13ff543e119fdbef
      246c50cfb19b5c8d

  sequence number: 9
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d39
  nonce: 0e06b572ff5668e108569ef4
  ct: 360a32e536bf5178afc6c676f0db58ffa411a2182251b277a8f4010d713b065e23
      42771fc9de8b3d2e7d4a5e95a757d5e3cb3c33ffca96c7eed77feab46c7ba09a63
      49e72c5f42fe8d84

A.11.1.2.  Exported Values

  exporter_context: 70736575646f72616e646f6d30
  L: 32
  exported_value: 8461aca597f1e1eb0ea51f9ea5b08002cf6fed3a9c380ad232688e
                  2c7a7d3bb1

  exporter_context: 70736575646f72616e646f6d31
  L: 32
  exported_value: 596fefe88796efd2fffe3926bf285ad0a4b6c126c5b86cee90b1b6
                  8dd4902bac

  exporter_context: 70736575646f72616e646f6d32
  L: 32
  exported_value: b332ccf3be8e7ede848e17c457ffb78afc59257164cd2ae26b5b96
                  4c74a569f1

  exporter_context: 70736575646f72616e646f6d33
  L: 32
  exported_value: b5f87bb01e1918b56a8efb2946c16d7bb228059529390ea2b3bb3c
                  032e5c8318

  exporter_context: 70736575646f72616e646f6d34
  L: 32
  exported_value: 835558ac9e5804543573361d287094e6237c27c868c24eedc1937a
                  115d43eac8

A.12.  MLKEM768-X25519, Unknown KDF, ChaCha20Poly1305

A.12.1.  Base Setup Information

  mode: 0
  kem_id: 25722
  kdf_id: 17
  aead_id: 3
  info: 3466363436353230366636653230363132303437373236353633363936313665
        3230353537323665
  ikmR: 9ed657ed25ee70055f12f2f1cf6f93165e5a6760a7bf6d4c2d9d6028c482781c
  pkRm: 9911845091bd0729a5ff90815ca83add7c72e099c0c863164b31bfd9b626043a
        4b0a3c7b12c4346cacaf27e87a0cda5213cbbb5b900906629367090ac18b9d77
        71360998579c4236ba94530fd66610a98565f5ab16c09dd03b773e08960f8677
        4b25ce60453880aa36f968965b8249e027317b0b8c034cc6c0fc4fed09123da3
        53d6e12fa56186f5e84965274141a387f0c34b9f61913f1ab157a84818cacdce
        5c301d4b90068180ec7571be800cea28344e7686c90903737cbfab5c3271d4cf
        895319dabc6b8f6960206c9fcbd047d21292a49a8668f57d7d3c970e5c33f6c7
        a031aa97835872d18b400c2198a25105b64a1160a2b4a41b8e129182b91649da
        eaafde5b00c535006eda51fdf18da2b1bf9118597d9b0339f6240f847225da68
        59d654b2093ced52524d6205b46ba381e186aafa980f10c2b48034e925ba6613
        4c0f22c9c449834ca3c64aeb30a2ba7e45753e754008f1738846fba70a53047c
        204ee7ca4bc941360e5b5b7c436d63cb8805f0afe89b611091a3cc4a8097dc3d
        c1c16582fb77cd877ce0f082ee191a51fa52b9f963c4db588e5b50f5403c2536
        27c0c1b51535a24bcb5050577df039640f184c3a0515fa8a3dda7420164abffb
        2a7638e18ec08884c270a37b2920a9dabe11062f0434503499987b823ab6496d
        11f6cda0d10922646e2f32b191435c3ada4b2daac669173498212c1b836113da
        02e8951f8b3a649d6c3e78440064fb0c51f85d21abc5ab850198273042e48005
        a730da18635c2aa088d095334126903291f380967df663027bca4bc9ab39175c
        cfa62a068a9756aab81306bce4938092b7496b4a4eb2704022b36b3c9b1059e0
        611f086c3ba6c41c740fc49b1aad086b6cbb3e3bb257aaec638ce016ca8669e7
        402ab36b7f4d82a5a9759517f59a6be70abba022b114cb47566385c22b7ee10f
        a7d9c58453a87283cbc0c84798c1b5bd7086f06936fda6cf2c009a48699c7d70
        1c6e0945bf21263c939facb1787b05704fd42e66c30211c3b7bf9b65b4bb0f8e
        487a4b32aebb5740a79c60967c978bb474158802c78148cf12188cb8041ccb0d
        1a322420150a19878033292cfddbcfd2da7111734f7ed2c377a4b0b1a49bdc41
        1f8a05686da0b5ce08ad7ae25d7543008740c56a385579b16a8701ce83ebb848
        d286d187b8859bcdfa49b894fa9830581eca7a37fab258642b6ddc3c485866b6
        9976016bea5af9d8395c2cc09b9c0f731b22e6769b32227ca607c1c6c167bff0
        2608590f47e451f69a47bf745b2f86cee45c2347cb2994a78f70e9966cb10a65
        705dced887bc1c6125d523a2e0ce9de8885c25b54fc4cea0582a81c8bf958acd
        b283200b649953f9a243d4aeca6024f195cc5f62c4b2e913d2f423dc1a1a2f08
        c307b28b4f65bba5d32b49d77e68d471302cc2531507ff04bdf508c83d585756
        dc93bd08cd82d6984ef15c82aa978d00513aea8d7d2b76db37c007352f39aba1
        c643172c99ca2b334ea51298c4d9bf9c3886cb83353189173f8a225c09601c59
        58d8a335c57838a6ec5bce7021c081a0ad0a7a7211b93f584b83858ce387ca04
        758a84a774b4a709c90616c4100d68085323215f66d602f0e843c2871a8fe2c6
        34412c6790376c50733bf524b6c8d7bac81e8469a091c29e66f3ea4ac94fb428
        3dbc8b2723e154e82ee50b21d3400e90272b58104aebfeeb97768e234968d50a
  skRm: 977e67dd1cb3cbe7d2ba07816bd3d3d00f9b57a1c69426a628f4a1ca5ecb49fc
  enc: fa6f9ba3cd3c61e4612e030a17eac4ec810232396e5eb9897c9b7763beaaa4a3b
       722dc90e2d878ef19a467d2174b619e44ad48501f8894e417c7da658113606ce8
       c9281ae60ee4041efd415be95896ee6e7b81b4b4606319dc99229967519fff17a
       cc3f09b2743c4d3793d94d12aee939e4375b5c1a93171c7bbc74142311ee64831
       50b55f785b4d73ff6022ae53e5176da2a5350523fdc004512b315d0021d59986d
       afd6f1dd6c56b4bd17a743f43a3ff9dd44c917eb1edee00d27c3010fe6adc2d65
       e243b12c87f8a061b9dd61ef5a9dd6560b15e59745e1b38e35f980a1cfbd604ee
       cf700e52e558950cd6bf1956c7d9af0d88bcb26aa5a88982ca226fa29c4221dd5
       5b465dfe6c3c0c092e53d5cb778676136ab2e0e42c346b84120bef9b7d47e9131
       7c16c2ce9cdc3a342be4a4d1e43dfb3ef59873bad243ac73ce5460d114e2de013
       b41bf302729d17d101468223adc86b738f06823fe386ccca745c5178c310ae09f
       9d8c06387baec3268d2ad9cd2bb7ef20e49c0bb1a0d7e4458f29a1c3d4bcf0645
       a8559087fb81fa2251f44a5653b5af9028190ce7ad24ebff6415dc8869d7d8a10
       33ae7335f20fdec661d05b126135a666e6420cd247ce081a228dfa588e5366eb5
       69c9546440902545868d9748c920a53afdd2ef7883b00be19e976b8e3785666c2
       516d2ad1a1423a5aa157487d27dcba1b935e0250a7c770b769446c459d79724fd
       655a3436131401e04209da7c062122ec1068a066d98b5eea3082fd91ad77c7918
       e91305bb6e280e03de2dd0f7a7b8fe8ebaa805620caf025e018cc70f0e4d2a021
       a2b60b92165c8e49a12367ba96feb33773d62fcd6d98f8d2c10397d08f0028e49
       20c0d685bfe2cabf429132aef2103fa7b3b392c5b1e82f7b08bace4b60f65a64a
       2a84401179f234fc82bb671302c24df8f2c333e5dcb86c98066e2e0f3ca5fa369
       0e32ba6eb91f4b9ef20c013b73f50c30aa6f26f675f432c528a53b23ed910af85
       0edc6dd045a2c21336e6cac0cdc828a6b6520396b087d33e07a134f31a0cf421e
       ba121e7132bd6f2e05962b8876fcfb470ce90f7f2519ef7a2c14b843237435183
       12378904b601c880531894a4a27a3889f72ea5757d0df133997c4e47238a845cc
       81dd0285f31a85821fa2f743a5b2cce98f759c5c3e00d962e1d059c4bdd35299e
       70af9aec743f0ff94ea25d3593951d90f0eb2428481934e12b7c3049d1669d257
       ed758276c41d61db2fc9510281e780937bc04e5affdf3abbf1e8210a11c43b659
       77eae043b83181a5fa2e2ab0650d224e2f1833f711c6f9eea63ebe416a3eec59e
       b464aa969e696e3e2e13bc27989b6ece98c049a05b5748c1ced459d74a6202d9d
       952fb902bca93a882d68b19d9f4090bca812c5081a26c1ad2f2824ffcb024d400
       e177a7ed266855b8b810c2c0e42cbb46e7b9f0c72c6899519b19f2222008ade44
       c731d678002533c12bff5a9a769f62075f40318d8fb0f3f73004d41c2b05730cd
       83480b9881f3e159274814b7e8e1bb859b5283b6df723cd5224140c5f9980a462
       4172406e5e6f613189f7dc4fa24372
  shared_secret: 123e5d533b9b848e8a99543aa042a9a28cbae017a3d7730c5b6adcb
                 23dfbc27f
  key: 71663e55023184f6a4674fcb36a7789398d3c33efe1210ad1bbf4a1ad8aaaa6a
  base_nonce: 57bd1f0b8f5dd860e69d1f70
  exporter_secret: 84512f28ef61a222be1cac276c4751c89bc3c6318ee548e713dd9
                   40f8e1d8066589b922674736919f42053b03451b97ac8a0ebabdc
                   fe3df67260be07cd57b0a7

A.12.1.1.  Encryptions

  sequence number: 0
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d30
  nonce: 57bd1f0b8f5dd860e69d1f70
  ct: 47178a0360cb65c161cc69702a7c8875827cfe17345d5d6048c4b964010b929110
      8b022107ebba751f76b571a46fd9357097fbb9a43ee985b5b9d889b364ea02e91c
      c37d847c0a890456

  sequence number: 1
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d31
  nonce: 57bd1f0b8f5dd860e69d1f71
  ct: 0d03c2ae21f8c7fd487c4f2fe223a480785f3ef89c4593c010ac01bf2206ea6882
      5177168c286e19deff59c7b3fb267b76924e4a18bcd4b92d121f2408750a5b83c5
      06512c80fdbfe933

  sequence number: 2
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d32
  nonce: 57bd1f0b8f5dd860e69d1f72
  ct: 9cdf8ac7423474b4c9e7b46d5e3d9060a87ea85e979065b02dd6d17066a0266ac5
      769def51f6bff9df1e30c6936afb02557f4121c598e2e95e9f8e4f9b9d7be79677
      6d2b8e634fe0d807

  sequence number: 3
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d33
  nonce: 57bd1f0b8f5dd860e69d1f73
  ct: 95e471af9a80656008556a2504348b77481b0b7fe8b7f8592601de1218e4a1f9d6
      32b662864fcdc933702a64353150761e03c2b3cefe1706909536bb7bf8644135a1
      a5dd0d01dc07fd90

  sequence number: 4
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d34
  nonce: 57bd1f0b8f5dd860e69d1f74
  ct: e563176585c627b43bd71ecaaa48d3a3d19893e3c61fe87e8862b91c57210abf58
      4ea420c887784f303051f8b79144d54f469e394d7daaa426747d47d1d62b22552e
      fe80ffee07dd3358

  sequence number: 5
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d35
  nonce: 57bd1f0b8f5dd860e69d1f75
  ct: a265fbf951b3293f8ce676515a8c64490a8a726f5c04813e9b4db2f6a0e04eda00
      d8777701b7eab15f8b62ef70b21e5ebe302d4e8fcf748e3878d3f78772637dc0ac
      07ca9e69c4d6401b

  sequence number: 6
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d36
  nonce: 57bd1f0b8f5dd860e69d1f76
  ct: 195b86b6173bdb1402c8e743dd57b2a48569b121af1d8a6388d62be6f8ce3debfa
      c9977013aa3988b9756ac2bebacd0d20372f3b248a83b6dd81878a109a2ff6dbb0
      8d2175fa5634247d

  sequence number: 7
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d37
  nonce: 57bd1f0b8f5dd860e69d1f77
  ct: ec5e13eb3e1ba33bd99a634a1b7085ee3402ee4c58055111cec0c3acee12ae083b
      b0682a48c67d779c9579143987b6d32a927007d71e6741a5cf6d8a1b287a7c23e3
      d04c1f847c5486dd

  sequence number: 8
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d38
  nonce: 57bd1f0b8f5dd860e69d1f78
  ct: d2a8554c51640fdcf96d174bcaefa7ed865724d5e830de2a168497090cb2ca2233
      949f63469749cfcbc2cf72b7ead25ed8ba38e18e77e77b59ce3bbea6382759da95
      117beb3a6f735916

  sequence number: 9
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d39
  nonce: 57bd1f0b8f5dd860e69d1f79
  ct: 827fc6de9c0cb23a06317e33330bbafdd6d4b4dbbf3227a6cd35e7fa27aa4ab7a5
      c416c135cc6aad29a9dd4ddd5d808e87f898ca02549dad081d5e675eb530e031df
      568d6ac3c1a679e5

A.12.1.2.  Exported Values

  exporter_context: 70736575646f72616e646f6d30
  L: 32
  exported_value: fb85fd013ee7b6cbf28ab09a2e20af5621349fafa549baa292a90d
                  8e51e83cb2

  exporter_context: 70736575646f72616e646f6d31
  L: 32
  exported_value: 937065d5393f93efc519c1614361d8e66131bbdbfbff6ce8d44b3d
                  50a91a1272

  exporter_context: 70736575646f72616e646f6d32
  L: 32
  exported_value: 9c7336c0f212d0f17c6453c21d709907d87c87101f8c18590ee286
                  dc9be47492

  exporter_context: 70736575646f72616e646f6d33
  L: 32
  exported_value: 9b4f7bdef7179bce71e47177baab9a6e4b016fe731c98509710d6d
                  ba783f7ef9

  exporter_context: 70736575646f72616e646f6d34
  L: 32
  exported_value: 240f677428ffbb160262e71c96e50dc921b7819d19e803177730fd
                  b0cf543486

A.13.  ML-KEM-1024, Unknown KDF, AES-128-GCM

A.13.1.  Base Setup Information

  mode: 0
  kem_id: 66
  kdf_id: 19
  aead_id: 1
  info: 3466363436353230366636653230363132303437373236353633363936313665
        3230353537323665
  ikmR: 0278ee11918f9507508c01c00eecf2d031ea1fdfcad5eb80a4f4d5354be66152
        b0e2ed983c5d27069244dc174b7c1a53b4a4f89c535f56a0d0d80689bffb61bc
  pkRm: 94986ff91865dceb5545dc66ab563a66b69f44e5a1fc3b070b65b8bca63297ab
        cf3711afe3f90e020b8440c0aee97927e2b8bdc1c3009503bf6ef459e8f14edc
        8bac14e08b9c9ab57448b49ae185a8572a5d60b1c899c268fc3b6ab357a025ac
        0d6b00092b72cbc10b6e5194b66bc21602acaf0c718c0cc68e4aaf385a00f91b
        5cd4b103fb932149a7b9d85a1b87564714b27ad8e7910794618c16a3378692c3
        dbb3c414ad46189ba6f6b70c27c54fc7153d50a17d9a3f8d9c23d6a96677c01b
        1c883dd359014409a3c1799cad15b3cf231d4f7580a8e0b369f674a404c22558
        50aea820f6db2d85d72238a421cddc7502cc6d6b954ace72893a1b2d2067a7fc
        55351f264fdc70afcda13d22d765a817803dc875157a8065da2545c14a32f6b1
        621395c375720d0c44f9901af5667c7f83cd0a57783965c9b849701f3a97d5c4
        9de0145b99602e821566e0a72fc517c75e47af7f390633d42f42942c174a7472
        222c79b610a1a58118fb20dde85a6e7c152dc88aa9c136f9114309605db2a71d
        0e6c9e31d64846c710c8e83c2dd931f05455950886a0150143a06dbfb2271f37
        793ceb995efc753d299114dba8778156ae553d555139de082f0fab58e1b2801f
        852ce69a9d1f7658c447a817c3605c92743e14a11e04b67fa19faee6658bf1c0
        cc880bd7fb631d6cc0c850157fd011818175715cacbf4c27fbe694dfac8783e4
        a2b04b13d512a33a836aab7476cc1663a7247a7b0b970f5874d6a87e8682261c
        b76f2124a89b8b8623fc646039bc2de0914bfa40d6d5137be3926f533bc30477
        d3320a93744a2c08118b48a441e42c8d6b0da6d810d23bc476e3256e864f1c97
        132a2b98fe2465630132d3bcb323bc6f9b713cee867b3eb65e3723a8a5c82f90
        f203a570c4d27b0ca7e82b6400aa6be29ca4736688e826680577a9dba091b1ac
        6a618ed933b71d6954c3baa10e87834ae645d3a088b324b701c720662949e613
        9a59636b27b76d4478023a59cd9524c449c5863b28c5d0a129c45367a9a2b922
        fbb82f7a6f14f0596ab35676d285fbdb01e0da254504205bb65150808cca0968
        f5096727a00e20e1613764793ba348216b866cca6874198cc058a7a10975b829
        54a7a2ab5969cbd4eb360483677b779294aa3fed103b2615471ec979003087c2
        01b4b9aa85717c22a1b2cbede1266fb8011677a085ac8e140b9f1f73caeedb22
        da4225d8676a9e245ed5a652b8d4a8d854b62df62d267c578047941ab8c694d8
        64cc8327435879a7e1831ce0404e8543f8b12c3b6c113fb11a7ae5c84d3768dc
        88202a12c47e9299198c54a5221585130f2a7a268b38b29c34626a60492796ca
        bdf692f1767cb68c8042868c1f896d0450778e7620f2161d44307c84b85d7c22
        997fd4414f0b4d5873457b67ab186cc0a990937f3376bb348e84b33b22c03930
        8c6d451a0c9efa57eb681afb2274fb65b605d66344a3b6e8da6428632ad9343d
        ccb54f01b2ad2c992fa03b21a0f8a1920cd00fc0398527a808864ae7a0329272
        c5b2d6355f174db475576130123108be6e3a4c57c4a35f4c936c7204af07a22f
        2865add016ce16938c084878d5c0fea2379fa8c62a1a03d464c364448065a017
        95f62eab904929e39548692255cbc4b0d061be105d995589cd458628d7b6d332
        19bd1b5d3a671acecb08f7e8c3b989cbd4cb9daec9bc370c02ceb969f8bb9de8
        fcbbce7167a3ab62e45a46f795624e06a6938b8b9fba309a447ee8e548b3b349
        141a8f6e9a3aa98453f32952a3b8af2cd91661949ac7536aa5e286ddb9b82374
        67a550c31931887ebb681e949e886269267acedc9c209c8b44e29ba93eabae80
        e24022633793b52c836cc1bb7222e1d15d51892cd76b2ec8e0b7c504a0745778
        47b51098eccbef252a103a45200b66f0479afd4462e6b262ab392d0c14117a4a
        02c422b309a9c97ab87fed847afd1c498a746be5e9193ea82903826632609f97
        9984c63374910721e0334bd6d0b12201a3c8f31456a767f3077a1a0ab9165701
        a2456cadc7b8b4686b8d7b0fc7722e6e176faf3c8ba9fc76414b50d8441ceeba
        4666c7679d544f6766c85e696f542283b6b5160fa1220c949cd4a76d84429d3e
        f5aadf1586171b1076b59f6f50734920427811810d712479eb9bdac568c6c2a9
        3773b6d171315f48064dbadf351e25a5223aae6f94d75714c01cb15b33fd24eb
  skRm: d919b835b98c968e6a1e85a6e7c54be8774df0a4d00775626dea7c0fd0750d92
        fa2c8655a59401910e2da51f5bf78b2014840fed74753f760ac85586c0891570
  enc: 0ad5cf05cd1f610cd9ea6480bb51d65173a58470aa1904a9ca851695e1ebafefc
       cc7c9e9bd8fa8fdab6b41914b35a0e0abfa287e13e38e863d04849b36cddc4ea3
       37b95f60bae825d7f7881baec5a46e136ec4becfc5d022272cdc0700a639d5fa5
       e3a52a191e4da1a42a13c81ccfea6cb5b0b7c8613f82cd642fefe39c884403056
       1337dce23ca41f8233638a952581b1546ed24a4bc59ddfad87079fdbb7f69b71f
       36bc50eccb11970db724ae3ca42e3420635263a4859f254d83def930037ecc8f3
       aa8237e31aab421d6c29bbe2ab53ae012cb9ed4ac5dbdc40f2ffecce6eda07b0b
       491389932756828df6e30c982e98ffc26a3dfb507467bce4932fcf9459cd13c4a
       e48532f3a1d51177d4c586732608c8a2e89fb4bcb68cee4884c9ed7750ad5c925
       dbe5b6356279e85377db7dfe39395ab04a69700373ec05c54a758bf9aba9a8ac4
       0114fe006892e1bde91c4eb9326917b96b0c0f7d94a8abe5500943c2d78f3a542
       71e2ef9163fa3613356a750d6803bda6b0ac7d8227b3a5865e30d373c7d14a9b6
       bb5ead190f5b04516dd17cec64ee934d648d05231679c18cc493c964a8ac1e95b
       239c1887d68888f2ad37aad8714237efb55572077921b856a326fd8d58c062d1b
       e6d694495bc7634c5dad6559fde36f3bf25f574acc3227c4a04b0b0d7402548d1
       ffcdae97f706372dab7de7ea9f4572adb15c5020e2be1a0b2f91dccf0c922ecb8
       724c67ceacdeaca785a24252326b03db8dc2858a91d1441dd00be776e3246e2d3
       d4c7e7b348f3199d7a95d978c7c1b037ba1ae66c9082dc8ee0e4dc1d740537aba
       93fad1d91728c110bde37479456aa29599d3fee6923fb345c7322afdc43f08d5e
       5afb28a4a415af33d6b7aa17c5f1d3b18371ba5f81f618a324c9133c72acf73a7
       a14f896fe24c1f0ef9452c5eb81e3c8b20437366700d36f784c193866af646501
       a6fe4863ab6c26b608eed321a603ffccb13ec72dc0d5334299516fd6bb7ff4743
       c11fb9a6f6803a3c2f4b787a57491db12ff571772e84432b189dcc508f6e487f6
       27700d367037d8ed883e59e8f63944aba263cdaa8e7f60bd35984a95e67fdf438
       7cef322622932f97ffcf57e0568fd3d0b177eac13372ae2f36f8bfed6edf21fe5
       f3b4a7e7519391b5566f6420849263977fc13407d7da86c496d1c96f90405ace6
       ccfd0dd529c2a37b96fe40982164f805c578c2ec3bd0c1b932c09148f4efcf38f
       e7954234573315954b86c96c7b1b281d3a719366a66e4d73efdedeb3dee2e060b
       4c5542b097b80d1c39f58de5f88685ccc4cd7ab4da0123af67ecbdcbc145dcbda
       52354147a11c103ff8bc7783774aeb9dfa96c23cd9a016233046a93a71ed1b47b
       8e2887f22e9b4dbd145527c613aaa8e5333b9e7467ca61841d37f805664f9eced
       fc8f62fcaf392a2362a419eabf35aba64b332ac001b6df6039db869cfad027ade
       89c926448ba86b8a547e0f0d27606bbffdac20cd40a494a6bfcfea1b487ec6c7a
       d416b298f4ae272823b4502cc1db8735424302797dea67a46dc84b3e537f64e8f
       4c006efd4b2cb134b7f7d886fcbfcaccf0091703e425f58e35ebe927a51396fce
       ff741a3ca3b6542acc966a58306dca3dd81955035bd827c6b882660c132fc6130
       f8c40cdea47bf0414a4a08740ced69013ab823a4d2ab25bc060e36ae7c8209644
       a9e76105eff422c0591d0d4dc6a3cbba78069bdd3998123daa49d638f0f1b7f19
       74336ad335bce3fdee61b87443e6f3198ae55a48f3dd6475b2d6042fae8dc6cda
       bbcab267696aa60e140b2bfef0cbb770915e95f16c094bf39250847a772dac0da
       8e9c2441ef1c488c34936d98f231aa21f28f33f41769e145e07983fac02aab9e8
       2a36c9af934e89b5695650169796d674fd0eee16276c9f4ffd1a0a13c888a46e3
       96db1c3b44be870884e14ad077b0db4325ad2016c722a3c814aa1920cf7bd6f42
       622d060967a5629915619c1f23a9b92707ec4c458d4495ffee88df7488fd990ce
       1633f61a0ace2c9983ae9197d6b9ded3fa0ae0fd660f8d4392cc5731b1013ab4e
       0adde644e75974384c44e3b80b2023f0c7bdab2e0cd4d39490a4e7462c9142a88
       045279b01df1865bbcdc32393959eb0a3e01e07e2665477f31973361a9890d4d6
       fb58563cb365e6682a55f70a6fb7d6664fc81081cf356f056a5c4e05e85040853
       a33b99356c4a3f75
  shared_secret: c2575ffa4d3ac41eb1b7e31cff87172128a33a0f3065313351cb8e5
                 56e13a9b1
  key: 441ee6f135d3300ede9f1852f1f42bcb
  base_nonce: 310a20009a7d1a664530eafd
  exporter_secret: f8da246a278b45236e0f139a7d565a7a86981f0251996a2a8320a
                   eb94ef09cf3917b54007e23bc3f6cd902716ddcdf5ca39f698842
                   63020b06995939bd528d2c

A.13.1.1.  Encryptions

  sequence number: 0
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d30
  nonce: 310a20009a7d1a664530eafd
  ct: 356251f31223c1de2adeb0e15789fdda984b39a140d7cc979afc67cc1b33676867
      8e48edb73a31aa4aa7fa38fd2f351aae8f772373a8c7027993b1d7bf8ec762afa2
      6ac12e6cbad02304

  sequence number: 1
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d31
  nonce: 310a20009a7d1a664530eafc
  ct: d67254890363dc9151b526b158e65e96955340969a0b1e805bf34e52923f0f361d
      45e19def328ed3181c2ed5189214c12087c588ca096ae248828cebb2bd4d790ff6
      bcbca82b5b0b8cb3

  sequence number: 2
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d32
  nonce: 310a20009a7d1a664530eaff
  ct: e80864680ab8a4e6f05cccd557694898e0744f20c0b3521e9a2376bee6da3def3e
      6215af2987729662b5b138e51b255d02ac44b643b9e59f77306b5aec7d4ef06d95
      4da9dbd329dcc39a

  sequence number: 3
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d33
  nonce: 310a20009a7d1a664530eafe
  ct: 414edbbc9ed90cd0c9a5c52114cfa0b38b200d44f66b73d33ab0b56fdbba4dc3ae
      30f83ecf333bcc1969a21b120368181dd7d0c40d09c827e31c039a1ade051e8246
      88faf1770e183b09

  sequence number: 4
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d34
  nonce: 310a20009a7d1a664530eaf9
  ct: ab5cfb41054b0a4aee98bd8f791c2d1cac6be826d3e1ef34a3d11ad683d31bad5c
      40ad590edcc5c76b0d4b49fd3ca8fd369a6dcc2e6764bd117615340a05021b82ac
      9275d9d9b3e896d1

  sequence number: 5
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d35
  nonce: 310a20009a7d1a664530eaf8
  ct: 35b85c8573ceb3d4e5f6d11eb7968a5dee839e3acb00cb9e4dc594de4c15601478
      3d7feaf006e07598d622f04b2df905fafbddaa715b707f4de674a5e4fbcc9cf7bc
      e879a002689c453c

  sequence number: 6
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d36
  nonce: 310a20009a7d1a664530eafb
  ct: fea0f4fd72a86ff845cd391af465cdd32d38a5099fb99c797e7d6933eb25527f02
      0c9667cb2044e0a9a48b1991f76d08873f013002c176aee8453b38af7291a322d6
      5859edccbd20a270

  sequence number: 7
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d37
  nonce: 310a20009a7d1a664530eafa
  ct: d2602b28e89965a304d09b0e93339f6c2dcb41eef81937d8980a228f85428b6e11
      cf3990875ff3b9b47f62beaab6ff4e59b41a11b5182165e4a6d7ca63e4bf016bc8
      b2148ca1cc683a30

  sequence number: 8
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d38
  nonce: 310a20009a7d1a664530eaf5
  ct: c5069a5f1df75ded2932b3b99bd2a7f998a773ba83772674e01e72c313f73cdb4b
      a73e30968813f4aeb31cc3b69ce2537292c3e48a831d275e01c4d5a8cf9b025565
      4240574c2548cd91

  sequence number: 9
  pt: 343236353631373537343739323036393733323037343732373537343638326332
      30373437323735373436383230363236353631373537343739
  aad: 436f756e742d39
  nonce: 310a20009a7d1a664530eaf4
  ct: ce12c2444cf3a5a1b06de09d857118211be0553dfcd986371b5af0fd7054e604f1
      525b7d8fc00253a28317a3ddddf61897551750184d197886106ec687796e4270a9
      ea6bef86c7cd608d

A.13.1.2.  Exported Values

  exporter_context: 70736575646f72616e646f6d30
  L: 32
  exported_value: 191181ed02b2f817fa25ded3752b71d8d61c34c051c362cc283f58
                  002974c225

  exporter_context: 70736575646f72616e646f6d31
  L: 32
  exported_value: a623dba86c60ac34914c65563c3989592085110280b11b49b67225
                  88fcea2d96

  exporter_context: 70736575646f72616e646f6d32
  L: 32
  exported_value: 814f7a487b3d96fcd10ee069d86a61f7acdba088617e9bec9ab5d5
                  96f8ac6655

  exporter_context: 70736575646f72616e646f6d33
  L: 32
  exported_value: 26e6a79f6556555df3c8392dbfcb8ffddb4bb0d2e7de6a2fc010f4
                  45be447056

  exporter_context: 70736575646f72616e646f6d34
  L: 32
  exported_value: 8f0aa253ccdab7f34efa5264fcce34e702f5e9509b54507a6446a1
                  cb5541bda2

Authors' Addresses

   Richard Barnes
   Cisco
   Email: rlb@ipv.sx


   Deirdre Connolly
   Selkie Cryptography
   Email: durumcrustulum@gmail.com