Internet-Draft PQ HPKE October 2025
Barnes Expires 23 April 2026 [Page]
Workgroup:
HPKE Publication, Kept Efficient
Internet-Draft:
draft-ietf-hpke-pq-latest
Published:
Intended Status:
Standards Track
Expires:
Author:
R. Barnes
Cisco

Post-Quantum and Post-Quantum/Traditional Hybrid Algorithms for HPKE

Abstract

Updating key exchange and public-key encryption protocols to resist attack by quantum computers is a high priority given the possibility of "harvest now, decrypt later" attacks. Hybrid Public Key Encryption (HPKE) is a widely-used public key encryption scheme based on combining a Key Encapsulation Mechanism (KEM), a Key Derivation Function (KDF), and an Authenticated Encryption with Associated Data (AEAD) scheme. In this document, we define KEM algorithms for HPKE based on both post-quantum KEMs and hybrid constructions of post-quantum KEMs with traditional KEMs, as well as a KDF based on SHA-3 that is suitable for use with these KEMs. When used with these algorithms, HPKE is resilient with respect to attacks by a quantum computer.

About This Document

This note is to be removed before publishing as an RFC.

The latest revision of this draft can be found at https://hpkewg.github.io/hpke-pq/draft-barnes-hpke-pq.html. Status information for this document may be found at https://datatracker.ietf.org/doc/draft-ietf-hpke-pq/.

Discussion of this document takes place on the HPKE Publication, Kept Efficient mailing list (mailto:hpke@ietf.org), which is archived at https://mailarchive.ietf.org/arch/browse/hpke. Subscribe at https://www.ietf.org/mailman/listinfo/hpke/.

Source for this draft and an issue tracker can be found at https://github.com/hpkewg/hpke-pq.

Status of This Memo

This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79.

Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet-Drafts is at https://datatracker.ietf.org/drafts/current/.

Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress."

This Internet-Draft will expire on 23 April 2026.

▲

Table of Contents

1. Introduction

A cryptographically relevant quantum computer may or may not exist as of this writing. The conventional wisdom, however, is that if one does not already, then it likely will within the lifetime of information that is cryptographically protected today. Such a computer would have the ability to infer decapsulation keys from encapsulation keys used for traditional KEMs, e.g., KEMs based on Diffie-Hellman over finite fields or elliptic curves. And it would be able to do this not just for data encrypted after the creation of the computer, but also for any information observed by the attacker previously, and stored for later decryption. This is the so-called "harvest now, decrypt later" attack.

It is thus a high priority for many organizations right now to migrate key exchange technologies to use "post-quantum" (PQ) algorithms, which are resistant to attack by a quantum computer [PQCE]. Since these PQ algorithms are relatively new, there is also interest in hybrid constructions combining PQ algorithms with traditional KEMs, so that if the PQ algorithm fails, then the traditional algorithm will still provide security, at least against classical attacks.

Hybrid Public Key Encryption (HPKE) is a widely-used public key encryption scheme based on combining a Key Encapsulation Mechanism (KEM), a Key Derivation Function (KDF), and an Authenticated Encryption with Associated Data (AEAD) scheme [HPKE]. It is the foundation of the Messaging Layer Security (MLS) protocol, the Oblivious HTTP protocol, and the TLS Encrypted ClientHello extension [RFC9420] [RFC9458] [TLS-ECH].

This document defines a collection of PQ and PQ/T KEM algorithms for HPKE, which allows HPKE to provide post-quantum security, as discussed in Section 7:

ML-KEM, X25519, and P-256/P-384 are defined in [FIPS203], [RFC7748], and [FIPS186], respectively.

This selection of KEM algorithms was chosen to provide a reasonably consolidated set of algorithms (in the interest of broad interoperability), while still allowing HPKE users flexibility along a few axes:

We also define HPKE KDF algorithms based on the SHA-3 family of hash functions. SHA-3 is used internally to ML-KEM, and so it could be convenient for HPKE users using the KEM algorithms in this document to rely solely on SHA-3.

2. Conventions and Definitions

The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here.

We generally use the terminology defined in the HPKE specification [HPKE].

There are two meanings of "hybrid" in this document. In the context of "hybrid public key encryption", it refers to the combination of an asymmetric KEM operaiton and a symmetric AEAD operation. In the context of "PQ/T hybrid", refers to the combination of PQ and traditional KEMs. For clarity, we always use "HPKE" for the former, and "PQ/T hybrid" for the latter.

3. ML-KEM

The NIST Module-Lattice-Based Key-Encapsulation Mechanism is defined in [FIPS203]. In this section, we define how to implement the HPKE KEM interface using ML-KEM.

The HPKE DeriveKeyPair function corresponds to the function ML-KEM.KeyGen_internal in [FIPS203]. The input ikm MUST be exactly Nsk = 64 bytes long. The d and z inputs to ML-KEM.KeyGen_internal are the first and last 32-byte segments of ikm, respectively. The output skX is the generated decapsulation key and the output pkX is the generated encapsulation key.

def DeriveKeyPair(ikm):
    if len(ikm) != 64:
        raise DeriveKeyPairError

    d = ikm[:32]
    z = ikm[32:]

    dk = ikm
    (ek, _) = ML-KEM.KeyGen_internal(d, z)
    return (dk, ek)

The GenerateKeyPair function is simply DeriveKeyPair with a pseudorandom ikm value. As long as the bytes supplied by random meet the randomness requirements of [FIPS203], this corresponds to the ML-KEM.KeyGen function, with the distinction that the decapsulation key is returned in seed format rather than the expanded form returned by ML-KEM.KeyGen.

def GenerateKeyPair():
    dz = random(64)
    return DeriveKeyPair(dz)

The SerializePublicKey and DeserializePublicKey functions are both the identity function, since the ML-KEM already uses fixed-length byte strings for public encapsulation keys. The length of the byte string is determined by the ML-KEM parameter set in use.

The Encap function corresponds to the function ML-KEM.Encaps in [FIPS203], where an ML-KEM encapsulation key check failure causes an HPKE EncapError.

The Decap function corresponds to the function ML-KEM.Decaps in [FIPS203], where any of an ML-KEM ciphertext check failure, decapsulation key check failure, or hash check failure causes an HPKE DecapError. To be explicit, we derive the expanded decapsulation key from the 64-byte seed format and invoke ML-KEM.Decaps with it:

def Decap(enc, skR):
    d = skR[:32]
    z = skR[32:]
    (_, dk) = ML-KEM.KeyGen_internal(d, z)
    return ML-KEM.Decaps(dk, enc)

The constants Nsecret and Nsk are always 32 and 64, respectively. The constants Nenc and Npk depend on the ML-KEM parameter set in use; they are specified in Table 2.

4. Hybrid KEMs with ECDH and ML-KEM

[CONCRETE] defines a collection of concrete PQ/T hybrid KEMs. These KEMs combine ML-KEM with a traditional ECDH group:

MLKEM768-P256:

ML-KEM-768 and P-256

MLKEM768-X25519:

ML-KEM-768 and X25519

MLKEM1024-P384:

ML-KEM-1024 and P-384

These KEMs satisfy the KEM interface defined in [GENERIC]. This interface is mostly the same as the KEM interface in Section 4 of [HPKE], with the following mapping:

5. Single-Stage KDFs

This section defines HPKE KDFs for eXtendable Output Functions (XOF) based on Keccak. SHAKE is defined as part of the SHA-3 specification [FIPS202]. The related TurboSHAKE XOFs is defined in [I-D.irtf-cfrg-kangarootwelve].

The Derive() function for SHAKE is as follows, where <SIZE> is either 128 or 256:

def SHAKE<SIZE>.Derive(ikm, L):
    return SHAKE<SIZE>(M = ikm, d = 8*L)

The Derive() function for TurboSHAKE is as follows, where <SIZE> is either 128 or 256:

def TurboSHAKE<SIZE>.Derive(ikm, L):
    return TurboSHAKE<SIZE>(M = ikm, D = 0x1f, L)

The Nh values for the KDFs defined in this section are listed in Table 1.

Table 1: Single-Stage KDF IDs
Value KDF Nh Two-Stage Reference
0x0010 SHAKE128 32 N RFC XXXX
0x0011 SHAKE256 64 N RFC XXXX
0x0012 TurboSHAKE128 32 N RFC XXXX
0x0013 TurboSHAKE256 64 N RFC XXXX

[[ RFC EDITOR: Please change "XXXX" above to the RFC number assigned to this document. ]]

6. Selection of AEAD algorithms

As discussed in Section 2.1 of [PQCE], the advent of quantum computers does not necessarily require changes in the AEAD algorithms used in HPKE. However, some compliance regimes call for the use of AEAD algorithms with longer key lengths, for example, the AES-256-GCM or ChaCha20Poly1305 algorithms registered for HPKE instead of AES-128-GCM.

7. Security Considerations

As discussed in the HPKE Security Considerations, HPKE is an IND-CCA2 secure public-key encryption scheme if the KEM it uses is IND-CCA secure. It follows that HPKE is IND-CCA2 secure against a quantum attacker if it uses a KEM that provides IND-CCA security against a quantum attacker, i.e., a PQ KEM. The KEM algorithms defined in this document provide this level of security. ML-KEM itself is IND-CCA secure, and the IND-CCA security of the hybrid constructions used in this document is established in [CONCRETE].

Another security property that is salient in some use cases is "key binding". In [CDM23], these notions are referred to with the shorthand X-BIND-P-Q. The most salient for protocol design provide assurances similar to those provided by transcript hashing in protocols like TLS:

LEAK-BIND-K-PK:

If the sender and receiver have the same key (K, shared_secret above), then there is only one encapsulation key (PK, pk) that could have produced it, even if the decapsulation key is leaked to an attacker after the encryption has been done.

LEAK-BIND-K-CT:

If the sender and receiver have the same key (K, shared_secret above), then there is only one KEM ciphertext (CT, enc) that could have produced it, even if the decapsulation key is leaked to an attacker after the encryption has been done.

DHKEM and ML-KEM meet these properties, as shown in [CDM23]. The hybrid KEMs used in this document also provide these properties, as discussed in [GENERIC].

7.1. PQ Hybrid vs. Pure PQ

Assuming that ML-KEM is secure, either the PQ/T hybrid KEMs defined in Section 4 or the pure PQ KEMs defined in Section 3 provide security against a quantum attacker. Hybrid KEMs can be used to provide security against a non-quantum attacker in the event of failures with regard to the PQ algorithm, including both implementation flaws as well as new cryptanalysis. See [GENERIC] for further analysis of hybrid security properties.

7.2. Asymmetric-key-authenticated modes of RFC9180

In the [RFC9180] version of HPKE, KEMs could optionally define the additional functions AuthEncap and AuthDecap. These functions allowed a sender to authenticate the message to the recipient without interaction.

The KEMs defined in this document do not support AuthEncap/AuthDecap and cannot be used to migrate uses of HPKE that rely on this mode. PSK-authenticated HPKE (Section 5.1.2 of [HPKE]) or digital signatures may be suitable alternatives.

8. IANA Considerations

This section requests that IANA perform three actions:

  1. Update the entries in HPKE KEM Identifiers registry corresponding to ML-KEM algorithms.

  2. Add entries to the HPKE KEM Identifiers registry for the PQ/T hybrid KEMs defined in this document.

  3. Add entries to the HPKE KDF Identifiers registry for the SHA-3 KDFs defined in this document.

8.1. Updated ML-KEM KEM Entries

IANA is requested to replace the entries in the HPKE KEM Identifiers registry for values 0x0040, 0x0041, and 0x0042 with the following values:

Table 2: Updated ML-KEM entries for the HPKE KEM Identifiers table
Value KEM Nsecret Nenc Npk Nsk Auth Reference
0x0040 ML-KEM-512 32 768 800 64 no RFCXXXX
0x0041 ML-KEM-768 32 1088 1184 64 no RFCXXXX
0x0042 ML-KEM-1024 32 1568 1568 64 no RFCXXXX

The only change being made is to update the "Reference" column to refer to this document.

8.2. PQ/T Hybrid KEM Entries

IANA is requested to replace the entry for the value 0x647a and add two entries for values 0x0050 and 0x0051 with the following values:

Table 3: PQ/T hybrid entries for the HPKE KEM Identifiers table
Value KEM Nsecret Nenc Npk Nsk Auth Reference
0x0050 MLKEM768-P256 32 1153 1249 32 no RFCXXXX
0x0051 MLKEM1024-P384 32 1665 1665 32 no RFCXXXX
0x647a MLKEM768-X25519 32 1120 1216 32 no RFCXXXX

8.3. SHA-3 KDF Entries

IANA is requested to add the values listed in Table 1 to the HPKE KDF Identifiers registry.

9. References

9.1. Normative References

[CONCRETE]
Connolly, D. and R. Barnes, "Concrete Hybrid PQ/T Key Encapsulation Mechanisms", Work in Progress, Internet-Draft, draft-irtf-cfrg-concrete-hybrid-kems-00, , <https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-concrete-hybrid-kems-00>.
[FIPS186]
"Digital Signature Standard (DSS)", National Institute of Standards and Technology (U.S.), DOI 10.6028/nist.fips.186-5, , <https://doi.org/10.6028/nist.fips.186-5>.
[FIPS202]
"SHA-3 standard :: permutation-based hash and extendable-output functions", National Institute of Standards and Technology (U.S.), DOI 10.6028/nist.fips.202, , <https://doi.org/10.6028/nist.fips.202>.
[FIPS203]
"Module-lattice-based key-encapsulation mechanism standard", National Institute of Standards and Technology (U.S.), DOI 10.6028/nist.fips.203, , <https://doi.org/10.6028/nist.fips.203>.
[GENERIC]
Connolly, D., Barnes, R., and P. Grubbs, "Hybrid PQ/T Key Encapsulation Mechanisms", Work in Progress, Internet-Draft, draft-irtf-cfrg-hybrid-kems-05, , <https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-hybrid-kems-05>.
[HPKE]
Barnes, R., Bhargavan, K., Lipp, B., and C. A. Wood, "Hybrid Public Key Encryption", Work in Progress, Internet-Draft, draft-ietf-hpke-hpke-01, , <https://datatracker.ietf.org/doc/html/draft-ietf-hpke-hpke-01>.
[I-D.irtf-cfrg-kangarootwelve]
Viguier, B., Wong, D., Van Assche, G., Dang, Q., and J. Daemen, "KangarooTwelve and TurboSHAKE", Work in Progress, Internet-Draft, draft-irtf-cfrg-kangarootwelve-17, , <https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-kangarootwelve-17>.
[RFC2119]
Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, , <https://www.rfc-editor.org/rfc/rfc2119>.
[RFC7748]
Langley, A., Hamburg, M., and S. Turner, "Elliptic Curves for Security", RFC 7748, DOI 10.17487/RFC7748, , <https://www.rfc-editor.org/rfc/rfc7748>.
[RFC8174]
Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, , <https://www.rfc-editor.org/rfc/rfc8174>.

9.2. Informative References

[CDM23]
Cremers, C., Dax, A., and N. Medinger, "Keeping Up with the KEMs: Stronger Security Notions for KEMs and automated analysis of KEM-based protocols", , <https://eprint.iacr.org/2023/1933.pdf>.
[PQCE]
Banerjee, A., Reddy.K, T., Schoinianakis, D., Hollebeek, T., and M. Ounsworth, "Post-Quantum Cryptography for Engineers", Work in Progress, Internet-Draft, draft-ietf-pquip-pqc-engineers-14, , <https://datatracker.ietf.org/doc/html/draft-ietf-pquip-pqc-engineers-14>.
[RFC9180]
Barnes, R., Bhargavan, K., Lipp, B., and C. Wood, "Hybrid Public Key Encryption", RFC 9180, DOI 10.17487/RFC9180, , <https://www.rfc-editor.org/rfc/rfc9180>.
[RFC9420]
Barnes, R., Beurdouche, B., Robert, R., Millican, J., Omara, E., and K. Cohn-Gordon, "The Messaging Layer Security (MLS) Protocol", RFC 9420, DOI 10.17487/RFC9420, , <https://www.rfc-editor.org/rfc/rfc9420>.
[RFC9458]
Thomson, M. and C. A. Wood, "Oblivious HTTP", RFC 9458, DOI 10.17487/RFC9458, , <https://www.rfc-editor.org/rfc/rfc9458>.
[TestVectors]
"HPKE Test Vectors for Post-Quantum Algorithms", , <https://github.com/hpkewg/hpke-pq/blob/main/test-vectors.json>.
[TLS-ECH]
Rescorla, E., Oku, K., Sullivan, N., and C. A. Wood, "TLS Encrypted Client Hello", Work in Progress, Internet-Draft, draft-ietf-tls-esni-25, , <https://datatracker.ietf.org/doc/html/draft-ietf-tls-esni-25>.

Appendix A. Test Vectors

Each section below contains test vectors for a single selection of HPKE algorithms and contains the following values:

  1. Configuration information and private key material: This includes the mode, info string, HPKE ciphersuite identifiers (kem_id, kdf_id, aead_id), and all sender and recipient key material. For each role S or R, (sender and recipient, respectively) key pairs are generated as (skX, pkX) = DeriveKeyPair(ikmX). Each key pair (skX, pkX) is written in its serialized form, where skXm = SerializePrivateKey(skX) and pkXm = SerializePublicKey(pkX). For the PSK mode, the shared PSK and PSK identifier are also included.

  2. Context creation intermediate values: This includes the KEM outputs enc and shared_secret used to create the context, as well as the context values key, base_nonce, and exporter_secret.

  3. Encryption test vectors: A fixed plaintext message is encrypted using different sequence numbers and AAD values using the context computed in (2). Each test vector lists the sequence number and corresponding nonce computed with base_nonce, the plaintext message pt, AAD aad, and output ciphertext ct.

  4. Export test vectors: Several exported values of the same length with differing context parameters are computed using the context computed in (2). Each test vector lists the exporter_context, output length L, and resulting export value.

These test vectors are also available in JSON format at [TestVectors].

A.1. ML-KEM-768, HKDF-SHA256, AES-128-GCM

A.1.1. Base Setup Information 

mode: 0
kem_id: 65
kdf_id: 1
aead_id: 1
info: 3466363436353230366636653230363132303437373236353633363936313665
      3230353537323665
ikmR: 58646bbe1e616991ab77515416acfc88eaf977ff6fcc26733d44f47efd031eb7
      1ddff3dea601f98884ad2f9b0cc04162993e57e851043c7458b2ed2495ec1706
pkRm: 9206d049786d148c25ae5b8cf44b61b0b05f3b354c49f71ab24a968b36adbf92
      500a3448ec1a15fec708bf6a6e79a15ff597a9fd154c13476e8d241fa82269b1
      146c754115ca622c5ae55d0b408c1590b75f2893c947474fa7115f721919772d
      7776cf960cb34150a9d274ab876932dbc7207a7321005c604aa5baf846514b75
      5fcf273112fa33d87ca073ac9092f088e2031559770de96a43a7424542e129bf
      1a29beb378a1f0a9a04635b85361de0b4d90f890320cc4f57533ce9888257155
      b79567ee2acc8d85bf29594786d871e02070679c5b732690a16a3694b318bc73
      c6bee3cbef015324430b796b1e4ae8145de21688d09fd69a3fabca7d161cb996
      2a213363698ab25c44ac9c736c7764836c9f6929b6154decb138bce16be81653
      94548d4ee82f47d4852f0c697e2612c5c99461f745771610be728ac4f4b4a18b
      7dee5628960a3f03c478a9471539ec00a120524370c6c73b80a90576281859ce
      7b508a0308dd5220ee82cf39908c296a1434f4bf39d25b1813cb4028b0f190c4
      a6f366c5f7cc5e130cdbc14c6e691cef9256d9006030698ea3c1bba6e93b62aa
      7cfd18866bfb928cf81d48777de2022903d325e974c64fd30072bc7d2c634da7
      7c8dc1c70b312a07e94c0986d41f11a3587a831fedf0953dd3105747bc27fa45
      a60381fe813a0aa58af7d14e6e27396300665271414d37996edcaa8634865b39
      5130eb4686805784c2af9a443c55ecc16974045349750aa211d26c1621d817d7
      a664e79c49dc022fa65a5ca079a1cd2414deb7c913e05684e0623cb24d98538f
      3d270f0c6ca5420577053933a1c7b347e736b6b9a4fe85b7fd5c02cd63a32d58
      225015820738a3a3f178ce920a99a2004046b1ad375cc68b7611504907922a5f
      b3195d0203e85a9a6e59225200c588d11e60e9793af912140c28de21ae74722f
      57a2336f6914280c41dd712534a6ce4cea0610a681c0a4436d77c2fd0b23eac2
      921232101a773b176ca16fc56bcfe6bda3910864a3992be76412ec3794780e2a
      2180bf866174a54048420b35daa0d530388c58b768474506958aea605c8ba85b
      bd5c9a0694221ccc5fa0eb5eb7393f30d49403fc6f51eb87242754d7d86edbc6
      1c3d7651bbf157b3b6030d4bc6dc14845e0927db75ce29f1144edc707a50a26f
      e2cb8ddcba6598575cc955186c9c75232da1561d2d0c26e2c40982896bee8087
      d01ac0da40161c9bcf26f3651d315336f59ebf8003cd6764a657bba41b7d167b
      ba4759ab3ca58432287e8d11698b1c3ed40036bf0659b183337b7ca3b2d893ea
      5391f92b3a0cf52f28f1b1aeb8a32d428bae55be84394b07f21b5b0016883929
      ae3841076307e57a376f9aa925c0552fc90e5f55c249a200a7d42fd659bcd803
      955607ac6a4771b6303f28d545e0ea9e77e501bd68749eb8ac32578b9e922d1b
      466b7b55bd1d3224aaf547a74b4e02cb245de42fd737adab18b3b6e1c3d67188
      c36716179864cb6a195c897c18a8b993265b39d0688544906bb21bfc9756f92b
      935e958527f6534ef757faec5701f205c1a90224a4632f20b3e70c7e77219178
      47ca215116aa3948430240dd054bbd089c22998d639384c317c0d1c1b7e8ec71
      2428022e0d9c1077ae7494c7ff437658c947a030327552b1e7bffbdbeafed35d
skRm: 58646bbe1e616991ab77515416acfc88eaf977ff6fcc26733d44f47efd031eb7
      1ddff3dea601f98884ad2f9b0cc04162993e57e851043c7458b2ed2495ec1706
enc: d74c5bd09d508640b59294dbd993c7a0c4b3b4c48c80455e169cebf8719995d80
     f53ae39c475a1baed31a11640e6887c4947414a37aecdeaa58342f2c187741c26
     cfbf860c642267f2661bd2c5750fcb1d19434043257edda4e6d75a1110cb2179f
     07e5f3c1306ea0725e9d9d8538d579f4ee4180ad89a8ac7dde746364fa5bb0bbf
     43e9ded65b55e2e6fe5e2b908b7fbe571cefb9e9917fbe101a1bad4a5460fa6e8
     2fb76bf6a6b5b56519e3916b0806afbb7aefac3841fbbee3691d6be8ff460006d
     46e2c9fee32c165a7b4b564315da983d2def53740c0d6e41d0c5bd7bf4fc1b97a
     d1b3f1b28df26318d109b36d426808385c30131244dd9a59af1a83c60eae1590a
     70c64e6e78f5f476c217e72eed9710488712d1b13796a2da5626c62e2f9801c0e
     27294f15c217d5c4eb9c5cadac4207693124bcf26fde26fbd108091ad26428cd8
     5257aa115c008fc0ca7a538ae15f714aa32aba468beeb76bb14ae89fdf3037d13
     b6852cb2ebee2b428f5b8296e484fe5102a6f8e0f5d4003509dc1bf7bd802a206
     bc37ec44b7878357c933dc5dd3c8a465e5926b0d4a0c48d88fdd6822d7fe5a3f8
     d6f9cd5c603253e3f8df50d1a9801230b507fbd776d8f80ba8c054f2f4e80c5cd
     a19f5cbb98c4385506915e225ffec542f4714450793571c59bdfb668d76e6917b
     16954402621213d65c2e9859c1a5409d501549d0127e5511c93f207cbf277805d
     7fb47c26fc29bd9e81ace754e25ae5f0c8fb58a75be977c8d87d1ed3b87450aa3
     f933fe9fe5d0ed7d8ed5f3b0d52ef83dec68a245533ce8643aa6e51afbac261ee
     98ad4548d24a47b6c64c92955f0dc6038729551f4c72a0247de9cf3eb79fdbf0d
     a5839505f4b74d4febccda9098c5673e94852cda7f0984bdffdb4d49ffdbd719c
     854c1c0f057f7d7b624b89fb3237abaac63cebdeba603fc2f35439377172c6479
     30eb43078dd9b921ffcaa4948927b2e5ff1ca5d05ddf5e98cf6f05145760021d3
     257bea43a9702a8735d34dc68c8cebd385e4a12440769c6d077622de2d3c0389f
     af2937f6141470735af39c33d7f0f584353034c2e19e92332a43a78d342b1f524
     710b8429efe426d9c7f6243d8f9756a16761cc7da5fbba6fda1dddfffbe8f4eb1
     eeb72c69f14fbd70e831f49f6492f63eda0f5225924b80f710380baafd67eebec
     bfef06ac208e4ffdc07f501da4b60eb6d7125a6aea164dc09484996cd6a81e724
     960a25778e1bfcb540a9d2e652918683be205c6048a5a3b4487456fa86540eaed
     5db82ac41fe5f963b16851db60028ad89f6506b7423ad8f9b9139089e8b23a02a
     21a73ff0239662e925d8f28ca629e5fffcd3e0ac4f142e54163aa06299978623e
     b3d1c4c120f9b8f41b03d42054c85382014b560c2760be9d951d536951f7f4f99
     a91749bb5f5a1c5b16387618ccd7100cc9b2807b8e82562044426bae2fb74a605
     8461d029cec29d00669e4afd817c1b2770bda4b72c223fbbad4dde5bcfa7c2e4a
     1688e54391ce8eb96c1d47d9e1ae072
shared_secret: 8e09283bb9cbc89920f5f27ee73e7eedeaa9b008767819d1ecf9fc2
               483481a07
key: 419b485dcdf898e94168279b0dd0c925
base_nonce: 8922e150df17418266757b24
exporter_secret: c6c99ead76f82d3de8e56dabfba9fcac2af77d951412816468621
                 e14e879e0c8
A.1.1.1. Encryptions 
sequence number: 0
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d30
nonce: 8922e150df17418266757b24
ct: bb4ace4cd285158f44ad85583478c7ce56f412a6b42a262017167cf50e3cd0568b
    7211a1470d9798cbda148423b0681aecc1b7ebfcb3243cf6ee20b91fc661d85210
    c7822eae289edded

sequence number: 1
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d31
nonce: 8922e150df17418266757b25
ct: d9f6629c6ade2ab29cdd80e8539afbd9682d9d24a9647ed7d7bce88a1e282cdae6
    4860f5cfe0fb81e7f34cc20ff99ba27683828fedd840fe4b1d0542c7a72cf479b3
    b15e77319c20a26c

sequence number: 2
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d32
nonce: 8922e150df17418266757b26
ct: 88304ecd7556a3844ceac1dc3438e720a480625685bf1ac2324946186ceda0edd4
    a19bd6afa25c4c0a940a787a8517a0a6d365241f8562927cf0c0628f3ef19fbba3
    f8d760391ba27f04

sequence number: 3
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d33
nonce: 8922e150df17418266757b27
ct: 97f423bf0e2df02d87c6b7c8c58d3e25af6443f28a15059d54f8e650cefae44aec
    2d7a1ccbb83f7ff1d08d5ea42908cb0a6ecf48cf38d184e3face8ded1ce8822106
    ae576c8a3d5aae11

sequence number: 4
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d34
nonce: 8922e150df17418266757b20
ct: 1a83f27f63d359094be51d084d9812b3f2b90e73df6c6dc17be95bb35ff17b8f97
    9155b4124540c327cc3f49d1dd8277008d36d168e4b379a168ba13f139ec1c41b6
    f2f6bfa1721ef3ce

sequence number: 5
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d35
nonce: 8922e150df17418266757b21
ct: 8baf8bfc788b25bf1d9cde53a41d151a9407de2137de97f0e38ada46722a076d27
    08f11c2b54d6cc4404b83eeb1a5efa0c7f777947a762fe25e2e9c799356637bd32
    f3328c528d8f2aa4

sequence number: 6
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d36
nonce: 8922e150df17418266757b22
ct: 91de30b29e5721179563eaa998dc0ffeefe83109fb2b4ada275ef7b5838867a441
    87f1f19f3cda8b414dbb375adcb8d7e5ab77285678f3c729eef6b65e40cfb58d8b
    11f9da3bb625d58e

sequence number: 7
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d37
nonce: 8922e150df17418266757b23
ct: ce64b9b981424ae83addb429eefb328c3574d1c3d2b5637e50adae4d63f802bfbc
    1c60ef00b8f16da8b32ad1d09e4831891c05225c3fd7efcfc8f5998ce5d2328b93
    79b46da317256539

sequence number: 8
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d38
nonce: 8922e150df17418266757b2c
ct: 68a6b74989c8a421200497295e64fe65a360e361ed53777359ae6b26de0527372e
    7ca7bb86904588a1b9d0af7e255bf860a7cd3588ff23a2889d6c5a21762fa80d1b
    c3ac9485da48f113

sequence number: 9
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d39
nonce: 8922e150df17418266757b2d
ct: 41416732ffc333fd34004d1f3af53f76ae84186d478b0f7273bc0fa170028f57f4
    a989b485529625669847a05989be1061fcd2289cb1b900f9bbf479ebcc7fc521b0
    32773a277723e25c
A.1.1.2. Exported Values 
exporter_context: 70736575646f72616e646f6d30
L: 32
exported_value: 66840ee5843cc40ed70083a2144531db7434cd3dcdec25f591d96c
                b8015bece7

exporter_context: 70736575646f72616e646f6d31
L: 32
exported_value: 2c85663adbc4d858e9dabcdb9bd009fca97ae8677775f44f504823
                14f8688c60

exporter_context: 70736575646f72616e646f6d32
L: 32
exported_value: 0c333d433de55745dd2d7b4b213d49a8f666a0ada6c92dc234e4e0
                1d0fd7f862

exporter_context: 70736575646f72616e646f6d33
L: 32
exported_value: 2facec8dc3700ae98bc937c0a4d519c055fa35a7f43fb8826ecfea
                4cf0a45925

exporter_context: 70736575646f72616e646f6d34
L: 32
exported_value: 41a2769c8e1969d6d8e4da67fcb4ac0ba774856ace1ff6d57ebedc
                505637369a

A.2. ML-KEM-1024, HKDF-SHA384, AES-256-GCM

A.2.1. Base Setup Information 

mode: 0
kem_id: 66
kdf_id: 2
aead_id: 2
info: 3466363436353230366636653230363132303437373236353633363936313665
      3230353537323665
ikmR: fa9cb30a8db80b31afcce2339a0fed95d5b43022d68fc6309e3bcd1d4febe9d4
      3725c83a3606d484fdf9d50a75befdd798072e11ede12833acd76e75f6f9cf53
pkRm: 9c9615bd91a087392935dc0ffcb51946111d33c9adb6bb29d3395a78c106fe72
      a0633287665405e01708eeb8380d871ac8349f4a7b42fdab9477e0053487a56c
      2027743b6f6409b44e79505a51a5f4f990437c6df3058cd34229e482306ad16b
      95587e94371ef4a3ce99ebafbcdc7f400491c8f4b2274011eca6aa827803cd99
      3ab97a555f7448f311389c1c91fb39325fa2bdd9ccce1b7201c4bc7d4f068997
      f2141ac8b85ad6c48b5c7e19e10265e645b3f441e1866318f498ab8991d06133
      aeccb00e277d39d0c6afb87887ecb6ac94bf91c227a6a6781cf45056184bc560
      6493f2a4333a0410fbb8b69218c4ab908a7ab9fd9695580a47ce49c8a46b6112
      5844cf208b6e7655ed9b0dc2c0cba4d29e146ba1d5c6bdce26858bda6ea13733
      427a6ec683005b3172bb33ce702746d8707f1b65a93e6cb6346289b9f2003fbb
      1d64b64bbfac05b3e44bbf376f86011a8b22919c7874da5a7b7786599959a888
      4bc3f1aa0106e2279f0b49ec010b9ad1a9d8cc21e0d75003027eed5c6954bab1
      7b63472c8abca0f2123cb69bd209803cb8ae293864ee2bbadb00823bb369a795
      28bf55a16542040e3a3cc8b32ebce7ab3ae32606245421348e553c086755ccfc
      5b52fb5c7df6b82debc87d867a522a449ff9ea81da2428a09c87670a3b852042
      74e791c6f53e83e155661453553cb76c368ea7f82d6a19ce885cb280602fd890
      3a48da5d4609728ef74274d35c1c55aa081c03b40280389838dc7987a2f43bb1
      91ace1984039c4c91d85a394e0c8ccf2696b1b3d34ab2b2ae49c94c084713931
      bc8916cff743b5258609f775bfc4760144894ca929f236cfa45011644975bd65
      9ce5e1c6f564aca32003c94683c83c71ad10381c159d4a836da6b4647dd0393a
      2cb4f640ce54c28dbcf044720a03ef64bff0e0b50c3227c07854236831368889
      0ebb36a523ad1a3984d0346cca964c1993142cb251e78bb21684c20bb94f2cb5
      5d6f59105b131b87463b6e669dc3874469203a88b90a233962bc87479129924c
      852eaaf81fe6c633ed8a2e0dc364f9aab0740376f5e101bafb4931c64b35764c
      20aabf9664cc70f087f6ba03b2d4329d5b61c5b436a5606e6863449ca8209956
      b8daca3391495ebd330c02707068fb4d74fc2987541e9d0a9a68d64f8ee858f8
      483431e877be1198dee42b924280cecaac0c7c1ac6b9255db16faa35bda56356
      43c64873ec797e3a73708a13645ab385a8b2e3892670972a9b238159cbaa2029
      5429098be4a72d35c297501613d073a7aff68d39771c58e2c43ad411c2351692
      bc96bf837cbcba9df62279455715ae3a9022c077c0e96ad91809a30530cb783a
      f3905815e4c94b574473132f44799b02ac5cef094a1371753f9ab95cf3bc1f46
      38bb07466aac1f84b28609800fe5b5805d328c54522cd148871f3343c0377634
      9304a4658f7475589e7bc42891c954e13d2c63a67411bb7f7ac1b245482de707
      b5f632f3c8200402763909232a882e513834a67519718acc1d24a6d1996d5995
      521dc9a4e08ac486ac142561b5358a548b4838dff81f77b3b1a052535dc1732c
      134cb1822e4b900cf72300e10cc5e204cfb6489492b72da0227155b3679fd330
      8549ac429c850e45c070579275969ce966965de5bd096c3bbdb2002fb929b7b0
      578fbc4de38b45926285483aaedd66349554060de65598bb616006ad74d38c36
      e4674c07517dca11eb051534200aa3bc00b362553a48b1d5877aba40a503984b
      7b179178149c22d8aa4b370f94d4ac373036207452a518251f8a8192425a3935
      38db268a48b7bbcda975268c5e97295fb6560429e0b7dfa46d0802bc55b41c3f
      b4a6b3e2a4e3d327206b63cf97b7ae517ecd76a8b4cb042a966bbf8270846103
      d6070714875fee57a25d976dbb5b6542a7cffc1232f8545c48954946954fe182
      abf31338dea202187b30d9052aa2656692a16b49f991f464c04c01d0adcb12a6
      9a24d6f1bc1fc5a401b78060e491d3f55778b235801471ca3c79e6265adb3307
      e0ea545e08a05860b629f2021a8513b8321f44c324f3853dca7670ef4736eb33
      1de6c5818e9b22490158c36b31c311a2540b7f8da040f5c83e32f70f10140e84
      067593e6331820211a9855ed9933a71c46b8db606411c5a80c5174faa19a69ad
      3aa4a53ad2eafaf75c93fdf78b6b907e26205a1f65aaae7329777d925c23da61
skRm: fa9cb30a8db80b31afcce2339a0fed95d5b43022d68fc6309e3bcd1d4febe9d4
      3725c83a3606d484fdf9d50a75befdd798072e11ede12833acd76e75f6f9cf53
enc: 5a11a43a2ecee27f13892609de351514a3c387237186da4b9d8cb5e7d19156a4c
     096c58c0718e1ef829d4c7562dab1bef6e86978e97dd1b44e006dcb05a2f3f4c9
     091fb3b85dcbe0ce0e013fb28aea535e091e5fa4be7937984b9bb204c81745003
     35bc16fe97688bf2d3693e5db04dfdea680507dd415721ab5b8a70678fc6dc917
     26fecc5870bac95f3ef3077a6fe7f8175cde504e7189e84023a4f3089a2f0f55a
     9591f6d3983524a2ce2c3b33efc8b9b4a66831a5ab1c1d96c70cbbc602c69502d
     e8557b3176c016b9ec342fa93fb8e0649a70ca883abeec6f92a271dcb2d0e8898
     505a55417d642ec770a53355a9c87316124f2b76e177c97641d935d73828f0eda
     79b8ff4125897ba07078151bb2c78d6f13b8a33ed30b86e8074280a2ce6fc0a35
     5f17135a23e997cf7ef0d54c57a9e16d60b8be94e41d36f98f09f8e76ad191fda
     2b69d9596996a8a684c6f196903a94da5b04a8ff20b5a98b3197200232a4bc0ad
     1de62cd190f509bb76dbf0405d9f3f344a4b9a4f9a6f11de23fc3c75996211d52
     4f927398f643d2776d9c2adc0c12d3f099ed65939dc76c13ffde60d0975ad4ce3
     009a157bd20754877fabc642235cb0405b2243e01a335ae1190552688e58af935
     3f55b4113b8645a624fb54411c1eaf8b20058a40566378b7d8f31b05a14c24cfb
     ad0dec37231e4d7a33363ce56651acfedf937c52a445d18c3458cdd3d8231b4fd
     bdffebefb7b239b12cde2b7825028203e5d879223151b33eb634806e56e9a9140
     74a1473e22ac9c1ef1ef526fa8d93f9f69df2d9e4845ae1958e3d9cec991cc0a0
     c6748e6f62f3eb6c577de245a565d9d672f638c401e637a7ae462c73cf0f2ddb8
     cb0e9bc89035ec3d38346ef6fc0a3af7cf3f5d26852191696c4f3c678126f0062
     4b857abed62bd4ea6baea4865e220d29b6e808aab4c1b5bf569c6801ffbfa44d1
     f19467bb829ba40f309499f265082e011957131bf21b804e69a4e1dd9f2216377
     69a3172d5ba1aa1a8b65a0669e990d94504e3e3087caeb7a80c2b52a2da83dff4
     09462cabc72925a85f1b2303119cbcb8f9d14db8fb678ea8b2471c064520e6726
     b1a6260cb66f7e61d75f0da329c5a8a628403bfdef2e2fcf78b312e8fdf5588ac
     bca5f6c8a00f09f89b1cb22a87263745f07ea7d29bf5b58a92da75910fd377397
     cb83572e514225634356ab514aab2cb0cb5e5651e2dfa1c829327dad98fa51885
     9b15396c7f386e983b31be1379399c5d2cc96e1e78430452c0f07d0229b50c9e5
     c65f4a30e920c279c620c2584f47a0f0f897a80dff4b887e215e954046260de78
     a42cc874ddd4f43bd6db0aecd0c7cfa3368b86c3faa635ea4a3ac845a2aaae267
     eb18811aa994e3a20532ddbed537c1d6cdba76da11ab1c2c11c3849eb10155907
     9a158636adf919efebf8e51ec22d90adf1b2367dfbffdd5cf8c13e538fba59009
     f1807e09c25f4e39035212dfad37e81ac8142efa1bb22acc4df32cab3bbcf557f
     c014fd2ac718ff2aa4bb92948d3db1fcf294ab4e4d4552a9bf01a4cab6daa3c08
     1fee149827e19daee5ce467e289f72f7a9da6cd0ff0928be10ee0e71ccd9ebc50
     1d9433e21d67abc051acdd5c1d0d69482ab54593a6e5993efac444d483f3740dd
     3e1563b248d135dfcf2d7f3a53388353605baae8eaa377fac12818d7c4b8e3f1a
     1774f863bff6aad8ef430b72fb5182027c1d43f933e6785b19f0b6cf8f4d94ddb
     30b1819ba658bc139f41580b7128d56663a5a5caec91fe42f528177eb46b840f3
     29c08db81b097556d0a42d76867f8a8374ddca5d3ca87228ab5baae5ea843670e
     3033ea04e18bb8dedf5efefb3b66fa89bab4444f6b95acd8e7a47d94a28fbbdea
     4337cc7669fb48ed7e58d2c92ecfc9e786dbfdafb3b3fc0b71e73abcdf2a1a78f
     823a612d3c62bc29331d488c6f28b1f9f8174fb1b20427dfde038e2bfbc75841e
     88737bcb4cba58ac465f98248825bc95858620eff51fd17d0c8f5b27f39a6364f
     7ed451970cfb40326e396ba16a7f9f5a5cdbe6c844f5baed8870ade3bff3437e1
     2b3cbd7323485ac2ecca6cec198d156b4b5ea52c822c7f6a4c1f2dc1896e1be76
     9508e0305f4d2e7ca60766e44faf519eff4ddf389de8730a996a7567a5e1d59c7
     89faeb01b5d2cc2f96f4ad12c7a4d1f08754448f1aa0087c6cb801b2cb5b7d23a
     e61c66e7b0fc250a
shared_secret: 5d1b2dbb4e7b3be9a56f2cd7141c7be6e134506a118db75e71f11ad
               7ba9123a4
key: c66693616bd131ae1e2ab36f7c654d787d49f07e1d5dfc7af5af65b02d4f36c0
base_nonce: 0bad8d5a262f5a0ab2cb6368
exporter_secret: 56b7fca5cc647da93c62d4b607086a82f4a3adf13da084926ea7f
                 4f945ca40a802c19fa07a0245063f7fe70a00cf867f
A.2.1.1. Encryptions 
sequence number: 0
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d30
nonce: 0bad8d5a262f5a0ab2cb6368
ct: f3ee2f43fc5ebeba5716a66e11b61f1f12a15c66fb9328237091b8da8206d7eefb
    ed3ecd31102d8fc77d5a7a9efe33f2c59d0277eaac95f78f96f1d88073f8a82b74
    ed8808c0767b0ead

sequence number: 1
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d31
nonce: 0bad8d5a262f5a0ab2cb6369
ct: b5bb283c382042ebfd70598cef7812b73b7e4662dde2b4a9535da716c94e4ba1d2
    a3013e3474daee5dc2b05f4bfe91014670250f3a84e01d608598a5b8643482d139
    8eecdf7712deca18

sequence number: 2
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d32
nonce: 0bad8d5a262f5a0ab2cb636a
ct: 4f2c136d8b8bef5a4299dc0dcee3d203b37fe05c28afca99baf4a9f3b7706f6c51
    2c5828a4bc2c2b2911ffaa3bb4964983b0a8850b446c570b7ef1219cb57fd526a4
    65880afa1719e285

sequence number: 3
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d33
nonce: 0bad8d5a262f5a0ab2cb636b
ct: d9b1e594e04e222f481454a3811c5e3fdf0046a8f8c295bdce9090230fe8e8561d
    c799502b40cb4529d2aff1227876b2e8fff105b6def3f87d1eace86ca5f46058bc
    ab3acc12fef48316

sequence number: 4
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d34
nonce: 0bad8d5a262f5a0ab2cb636c
ct: 02ff05373386fba838d270ce68c22bcf006f8f30bc28e352d390a9ca8181d401bd
    a9434bf0f4ca35b587a73ae68585a6cfe5d56fa3db2358e8e10f1c5e4f8c467ea0
    7b02ddf533022648

sequence number: 5
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d35
nonce: 0bad8d5a262f5a0ab2cb636d
ct: d48dbab84f53869869418abdf0401dc718ab8d5af8368c59a802dfe67d874a651e
    9b6ebd65ef81307e1de521b5339285539973231746a5ce85c5517e4ff786a6c7ae
    b7220ad030a87846

sequence number: 6
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d36
nonce: 0bad8d5a262f5a0ab2cb636e
ct: 24555918dfed391be1a67f046f38be79a9c36d9ba2004a08873c410a4c0663c682
    090e13105cbf430506d72c296f7bd90ecce503c3e5a27aab176d9633bfa2e0846c
    ca66dbb31de8b011

sequence number: 7
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d37
nonce: 0bad8d5a262f5a0ab2cb636f
ct: f2d648605b60ae254d43077edf9d9d5cc799a6e4bda54c01a8f6ca63565f792e30
    0a2294c71913af0c04ed9396f5ad0abb91f45576ec1b7bf037bc98abfb76411282
    ef99025eff9eb56d

sequence number: 8
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d38
nonce: 0bad8d5a262f5a0ab2cb6360
ct: a72a11f9dfdb46706254a65d8f9bf009c00ddf62431960efa83b9ccd8148a6bcdb
    9b6d420b9d9a700c72e1a8d030cb48406c05c4e13ffaa624fa5f1a945c1b0ec011
    81a9c72139f722dd

sequence number: 9
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d39
nonce: 0bad8d5a262f5a0ab2cb6361
ct: c702e0cd379d7a674e5dfb2576b68f338d8b4e2050bb30c8a518f2a6fe5006265d
    c4f3e13e3aa94b1c1df5c9adaac1dc9c71d38c757715342e263f7b109d3e9cee69
    7d2f587f14b370c9
A.2.1.2. Exported Values 
exporter_context: 70736575646f72616e646f6d30
L: 32
exported_value: 4601336e1a8e296bfb1455f5d3947a308d78bade42964fcdc0d1a4
                9d23dcc8fd

exporter_context: 70736575646f72616e646f6d31
L: 32
exported_value: 69a95ca44e5944c59cf685dfc3f6cee46f5eb5fd2accb7574ba65e
                46aeea0d37

exporter_context: 70736575646f72616e646f6d32
L: 32
exported_value: 4df6e85771df349d14798c3aab940afdd5545f514d3551cd0dc18d
                fd8f94a3a8

exporter_context: 70736575646f72616e646f6d33
L: 32
exported_value: 6b4f36d89f5906bfcfc47c92da6dd796f57fca73dbf1c4bcbcb8c6
                ec72c88f4d

exporter_context: 70736575646f72616e646f6d34
L: 32
exported_value: 1f13810aadecb8375f6974010f25f48b2c124add160c89b047fb1e
                eed51b0924

A.3. QSF-P256-MLKEM768, Unknown KDF, AES-128-GCM

A.3.1. Base Setup Information 

mode: 0
kem_id: 80
kdf_id: 17
aead_id: 1
info: 3466363436353230366636653230363132303437373236353633363936313665
      3230353537323665
ikmR: fc2bf23ec45839afe233866e6d9dd036062505be6f500f7544d54c257a35a46d
pkRm: 648066f3f5933bf0cb271c904292a7a9fa0afd0ac13d5ac19e95ab87472aea25
      96a44cc83b7777d5ea261a61b2ce0acde3d2b2f8bc8ded6c50bc41c87d61c87d
      e6a164d81f66a24b1b342e4ff211b3832dee4258f454cad55c168160114b0c1f
      83c94124a28adf6002beb9ad1ddb824c48326d905244d173cf409b06e0c1d076
      439b3c7b8cb768a58600c6195898236bc380573b874d80e155b9761cfff095d9
      a502b0e12db3da31c02505278337d1aabe83a7a4ea328769b454a38080bb9861
      355c88b42a6d7fbb5a8593348b618b3a5659df9aaf0e86c219126180d37a73e9
      cab7c54066b7afa6184b6ef09bd05b7918e7b7f819a10929ca850b5f68839deb
      5997384c78a75cad49c837c9f0ba76dc3abe3a4f4463106e886038c05f4322bf
      84c9849f2479fa37a877f1a4d297c9b3297ad53cb2044c64b338524b62b47b7a
      53a95864b0cb1501a8cb0ba37e462b9a3220214333bd5e58a83c1552aaf8a36e
      e8c1200234492acf033004d60c642397033ed9675aa275d536c116c61455bc4a
      dbc20941e86b776975bcb8835dab52a5b5bf5554a82e2c6872f9b1390b917789
      51c62891918b4ebabc20c051ad170947a03a3087c7c84ea39e07d2805e8681da
      7b92db2739d4bb1b9fdc67c9508e073bb230715165eb7abc22bffe96911da27f
      ff3593f3fa880f2b78ec90a9ff4653f085b2a3677d85421e4b12628fa4807a06
      3a69b39087b22d97fca7d2ac9bc4e249a75538f99852ba4187a0dc41c7a3c285
      37b60d1675cc166c8089a933593d5abc736bf68d32f22eb020a8f5b8043ef89b
      b7836ab8a91d28cb3dd369059a6a461d2a1013c0a969d093e73cb38e13c18d0c
      a8d6125def7b74d5181070e39ec0f8c77b16007e11048703c52e0028e41450a0
      35907235bc8f0ab83d56c354f82a1008b8c9dcc4d6405b6ccb1f85399e0ba03b
      8fa53d230bbb7681482e4b37bd30aabe492042e25e673c26f670b12ceaa25a43
      ba64d34643dcc25cb498165b845c297e0204c42479b07ec522eb1085a5c98131
      39ac7d424d80f8afda81978385cfc586befd1ca1ffab0a4738206ce1c1b1a9b0
      2b9622271217c331669699428bb53359396315938a75d629d6f1594a525effc7
      ae9a54881ea8739ce868b565b767a603b37468f8998a9cfa3f66958cc5fc4c15
      da00ae4676d0039c5fb5c43a77bccd416de2516ed4a2a6f0725daad27ab74281
      8928c9f9d878b524bab532cd5cc9a641b5454181b33ac39d2e821140875bdb26
      573005a9020a46aeac8f0b928b44491f14828e626187b9ea06b99631767a7eb1
      e349b7da74169a780ab5754e744d2b29cf0509ce1293c84f4507b7e30a4f2c8b
      6c569f793c18577b9933d5ab90b3baff060447945df797a573f42b44fa9b8052
      abc7a55c19596667b10227c2b495c262bb23467dc622e56b34574a72b17267f4
      db66240a611f83c2d368cd70e83610523d377399a5e6243e298827a7b25d813f
      58f97e29295813f2966f194fe8c32e181cb50e731e659517270a92f15063cb32
      5198f62e4841c82a7c0ee3964845348c7001af1792934997aac4158c5e2c7924
      899833aa56b4ba391113b7d8781bc93bb6f9b97093e68a678b67716c5af2287b
      567300e1094274dc6e15c09ad8a34330def4947b938e1a64defc22735100646d
      045b06619201ec4802a66795dcf269638572beee3d7b8bfc21e675e102cc051d
      716aea87964307de93be93bfa45c7f9f7baf428dd462c11f9b7e26c3b621576f
      42
skRm: fc2bf23ec45839afe233866e6d9dd036062505be6f500f7544d54c257a35a46d
enc: d24e12ee6e4e8b5b2f157797f9e3cea165844f0afc17152b83e694ea828266b6b
     69f85db763b6dff4bf361164a2d34bfb11b5df65fa4803951d476c42f368f6b09
     47fc50ccabbe04fca006996c5a2911801d8be8701cb82e07c2ede8f0bdb1cff62
     18e4b4519c3d4d7a5785d9019214bf19107216f229b189fbc4f9b122621f20e49
     5b92a1ffe81472c65bcca85a5646e48f9c715a8e7ae984c1f87336b4e257e3ef6
     b50333a21eaad57fc32c182f55846a04a394a76f8f3f42ee0f4524461bd1730e5
     8125ed1f6d2f90a9be445f48c2da08a11a20313740e60c5c5eebf1ad43b7c5c5f
     e7a52160d081cb1f92503faa2a4338960d57fa015d2304f6ddcecf80e2f788887
     5cf37cf487c217418be9d2b6fc9a49534ca6510c9eb68de49aa6d7ed6efcddfe7
     cf88d71c9b177a2705d2bb1f1064053cefa6540a13be372e60d67a99b3e22102b
     444176f1b53292f6fc93625465a71a5fb49f1e718dcd1786de02e23f0b8038304
     b0f1d525c9749324d3e1bedbe3c804177ce5146aaebc511e1781fcc3aa9f53dd8
     95b4c322f2c72edde35cc97bcfe16857ea4c06d4de0dfb4e12b1b8b4a6507a5ac
     5ff3a6c041e41d98cbc73618dbc3e37d5197c7e9aa997b7ae2e1facc042e24976
     930ab6467237192357f24175e3ff2274e1174e404f54c29f05ef93c6593c951c7
     cc6eebb3ef867e150d65e6ce0d58bf32815de482e076618ff9f5319e6fb3721e7
     29bcd6faa2985d0da59d858cd66d7c21806b40dc2950a675b30dfd342ab661131
     a6119d3c6d8333a5801dc78be32ec80822dcab9ce4749ed8a8ce8d97347a7c5d4
     092d93574cb878a1dc3dfcefc598ca9ba30becb6effac3dcda5fdca87af8b56ac
     2128ecc7ed8f6c693feda22fc0fed6403989d5d624913e3f7190dda033a64fc1e
     789f461904d6caadb5d6e51f1706072bf969eefb72c18e560d6e61587b6a61836
     e69abbfbed88b14913536b6fa6e30f7ca32b5afcf51e7492ffec4b4a006819a4d
     0a458de1b586bc0e436ccad82a76094003d5985d67542b07f624a00bf57da2593
     c9d753ea796a0c9b42341eff4f4f05a9f3d06055f730958ecb69896231f93e838
     fb1810dc6cb2c5361d8c91a7973e85ca0886ece22220d8c3d8f58cb1bde01135c
     acf3a2b86b3c5a677b992ef1afb1a3a236db0fb1ebb3d115100c2161a30b0f9ac
     692d69eadee0b67aedb19c66b955c1eb902e426463ac6f9e917bd5eeb09d1bc41
     505bc07e777cd4005191e8fca7b0dbc62e25771cc1c73f64928a9e69c7e7c86e2
     081f26dc4922c701a50fb03ac6fae62211ecf363081a59015731a73a72ea56c87
     a497dbf164ff9a020025d5ee6e9811895747df6919b3d400429c8112e20b5ee51
     1848acb894432b555ef395f55b38f9605c318ff0612ec8afe7ee0b38a770abc86
     cc3bc3c84347b91883dc7f1fe22dcd5b30c4ccd5dada54e9223efda5a51021802
     56c0e2dc4e996fbd674bfbd4bba7a5061c0cffd0018ae49c92439f28c2df8f4cd
     4b55aed9bafb6c266a9189760b5ce45044b009c16178902d616f1e4a628877a2e
     f5be044ea9cb3420ea50a4cd6052f06b0c6c78ce9f83f8b6961e1e2b659be3ec9
     f6a9482684633df1a7f60979f3886de
shared_secret: 50d5dcfc0f41054304441030add13b1bbadf1ed4b8f9c3e539c532c
               69bd9ce86
key: 435ab57b5c1571747a4809fefd4e8939
base_nonce: 5670680a40535e9957945403
exporter_secret: b004798f06b2a41cd2b70e474ec290df5a395522686b70e04c30c
                 1388a7171807fc2a907ca472f47fd5f7e323f71bcf1eaaec47156
                 54deef199f37a3df208562
A.3.1.1. Encryptions 
sequence number: 0
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d30
nonce: 5670680a40535e9957945403
ct: 477d871cc03b3cb9191cdc05da04bd596f635d0b4d642972b0fb39394dd555cde4
    f2deb997671f778bf90e0a9dc34a86da798450b8b4ad0cefede8882873f894aa01
    07ce883b69fa4cc7

sequence number: 1
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d31
nonce: 5670680a40535e9957945402
ct: a5c5a9326a8365f125f762bf4b3794c13fc1534e21ad8f3da98901e96f5f6ea75a
    3808c8e07657b3adfb2157472ac6e936b5df8ed0cf3d980371339c10fc17b417f8
    d12b8a38acbbdfab

sequence number: 2
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d32
nonce: 5670680a40535e9957945401
ct: f2627515da55b0d028d4dbc0755bbacd6b80282242f020fe2d0e53c324ee07a509
    2d0331c777c87d4b60cd7c3c59369b503ded2de0b67a08cf90b0ff31c97c2d561a
    fe4570bd0ab8ba95

sequence number: 3
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d33
nonce: 5670680a40535e9957945400
ct: c0ba197283793c9e84600f9398fcecc6aa60a71561ca822da662aeeea0950a2ddb
    9e32b25055f544a8313210e4e328a0124674f4cf522b3292da632a0903bbaa01d3
    d6bf8f9e8367d35d

sequence number: 4
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d34
nonce: 5670680a40535e9957945407
ct: 74ac247bb840ae73fae0b290403789ad52906265b454dca02df25d44f7cad420aa
    f5751e01d0fba68af6d7e2a1ba87f78aff9642ac43c4e0403798d47be04d681277
    4abc41724d125de5

sequence number: 5
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d35
nonce: 5670680a40535e9957945406
ct: e9353f019b29ef5a6670972da5f621380953b9dd2d0f1c06bc7f2e22f69a87c46a
    6f047e899ffe74c9c472ac74151e74e144c2b49f6e8f7281494e65cfbcd2662509
    d9dd6a01828812a5

sequence number: 6
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d36
nonce: 5670680a40535e9957945405
ct: bc5cf59fb8ea90db8e56dc4c34bc301f7c7ac0a3021038a41bba992b7a4f68b16d
    dae2a847a01372af4b61b7274fd12481fa2cf7d4924600465da304203d4116675e
    191c10a688704ea9

sequence number: 7
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d37
nonce: 5670680a40535e9957945404
ct: 7666bf6d722f3f1da1f03ddb7edba4efbe52bef273e40b779ed9cddbd1b04c223b
    593ce0ad17c4db39bb7661f6cc8424a3f9aeb961e7783dfd483367f739a5f635d5
    9bf0e1ab56fa0771

sequence number: 8
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d38
nonce: 5670680a40535e995794540b
ct: 79a2d492ba2dfd1aaee34357b37ee2aa7c645817319d12b7a33efd141523d207b8
    e9b0615896ddbb529580211706e4dcec5a2f4cd007a7a6060dd61cee81acae7c98
    5687ffa89c5a0554

sequence number: 9
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d39
nonce: 5670680a40535e995794540a
ct: a56c370b81e05f65485981318b22b442ba22ecf20370c874b541956f6b05ac96d4
    4a9eb74438bbac29e176db8fd8618a7d9fbf588273143a4ff938fde04737beec08
    f9944907fff375b3
A.3.1.2. Exported Values 
exporter_context: 70736575646f72616e646f6d30
L: 32
exported_value: ca3e5d20be17ee7c200e884f2f2a622b9ca1a3f67d1ab5a4b58547
                d8a4f19744

exporter_context: 70736575646f72616e646f6d31
L: 32
exported_value: 7da7a38e27982a651b481125d47058867e7f0bfaa7cf53ea43a0c1
                64746488ba

exporter_context: 70736575646f72616e646f6d32
L: 32
exported_value: abb061f00f66d3a2d8590a4885cab7270c86730519793f261313c6
                fa7f399ae9

exporter_context: 70736575646f72616e646f6d33
L: 32
exported_value: c97ad4136141103f25e63bd60f0e338f166803855b1f2d9335e990
                d03ab946a5

exporter_context: 70736575646f72616e646f6d34
L: 32
exported_value: 9031183fabd948aeb52d2c2fdbba990140dff3743eb535fe29cb8f
                da60c0236e

A.4. QSF-X25519-MLKEM768, HKDF-SHA256, AES-128-GCM

A.4.1. Base Setup Information 

mode: 0
kem_id: 25722
kdf_id: 1
aead_id: 1
info: 3466363436353230366636653230363132303437373236353633363936313665
      3230353537323665
ikmR: d5b0aefe16ff267fb7dd124438eb5b220092c6446844a152a71614ec51ae5d97
pkRm: 1155b05d3c9b10d393eceb548d89a711173e3c706161c196c40615c5c1b5ff24
      24edbabb41491b2b7cbc65d4c5307862d1c80ea9055befbb2575196324c34484
      3c64df8c878c0bb61fa294326b8aa0005a420b9ba055a7f9a1696e2585c76aca
      dcc614a0d9786b6c389e19748c61824a044e509087f05201a88a1a3a74449f4b
      3b53390113555db361cfd355bb7667182760780ffab97a561c7a869a9083a9d8
      4084260466d20986e5130e22a4a3fea7adcba29592644d321c3d4a297fb11c83
      d44848a8c350daf7a157075391d349f99c5b612b0a98880d44d1437279ce3a3a
      ba327a092b51ac647804fef05e3fa35e7795bf45132450b4bd8cb22b8817528d
      075002675660c46405d9ad2e9aae6caa2c4fc912de2a8ea2c9b7f4e98dcafab8
      fbf2c199ac881e0b6416d809868aa56b024b5532475d7286301144918a209ba1
      a9c35a651533c52cd29f6a0ca9b2022b7476427ce0662c8cb561a28ccf86544b
      70573c9aabf7937915a16d985c6d5fb93342d204d5ba31fc5314b6048e6ed12c
      e60a5ffbf0a1d23276fc38442d350b66b596138a57d8b92d2ce6b6754c200eec
      cb8ea461d66145325542fb61b78299590bd96b79771d69f804ae868aadc96f47
      f85d9617540f57a241ba93086b3868a67e9872c53288a506ac2b5d87bf1dc73e
      a644951762815fd93ccdd959dd3b97a21cbe5fd627af46857cf11d8b2c2baaa6
      a311e0916b138d60a59962266a7527930e610f3a5c2f8d544b4a647ffb16b877
      933b286968b6c7bfafd618ad2a30fce154df05a1ed9c266e1031b0f982939675
      4b2a1a8f6332ec3844d659a41b0a83cc5b677274b31e55a3c25b7959f2068eca
      a5554b33bc850f25863dbbe69c32b2b2a4324694fa3231612fc7872eb4a36f4c
      e46437da85ba3a44fe79c303d2a37a4ccbac41902a23840a51cbe06913a0329d
      603b70d11c4d53c309ade6bb66faaec8a0076baa88122bcb50c6beaf8484932a
      085fb1b9095bbd7b891191b56c7c82808bdc6bfd6a181ba15a13f87b5e111131
      385613b917493b173b63c47baaa8db7177ba480f9d3070d9c987ca5612234806
      5c7455047abfc4672f220262f53ca261c361f7716c09c81c1d988ae90b7ce4b2
      21da551e79c68fea7336baa79928368d9128be85961084156bf6e06e25f32b80
      1076b9d2ce7896a41fc4610df1bf9a38af82820088e6379c57c7da85294e2964
      7ed91a10596b49bb3a6a7733fc0ca083069f429b77983b1e3520714876121725
      a3d7c5a637d9327029642a23225fa3843ed13f890636993ba4c4730448ea873a
      0a015fe6662332765dc3cc0d085fa4c2cc0ef1c0a4231a6eb091dbd51b47ab38
      f0301cf4a3cdb4c3adf47b91457333d88159620a2d5a627d399836d7a725cd76
      514d027a6f5b7bef68a0b6d4c15b896a92e162d5f142b8822b937579e6f6408b
      518a950b327b30bed19941c276140afa2869114bb4228f7c505d1023314ab657
      200a077e65738f1060e88c710e9841ae178830c4b7e22c40745094a68721ac68
      3ba603a0a5aa970318bbdb6a315880c3dda4a2e73202bdb7342a788cc9eb88da
      ea9261db0185da987a866a0d18cd6ed326f02b163f425abad6ad0e1258cc1565
      46c5fb01c67b5f9d0536b092e00a244a5ee1e08620c9f44fbac3c3a67a6109b2
      a3823ff84e9a19e4f15ff523108ed322baa7d0aff71db22f82588248f5abb330
skRm: d5b0aefe16ff267fb7dd124438eb5b220092c6446844a152a71614ec51ae5d97
enc: e0dfbc08a05ed91f0ca63e00640f2a0a55a5c704910be05021a1a374eed336f53
     8db6928686c31b77d4c30228fdecbe0f8f775d3fbbd14cfe1ace471658f6b8701
     2bcebe290bee2329ade1a95b60c276a2af59519ea08f96960d8376af1326738a9
     bab5a83344e08960a4c3c6c7be51005d00373033d0443401e5b823befe9dfa5fc
     3c9970c6aad7d5bce9d7b9e6174d05f2e4e2b4b57383351d7dd7caf1b75a5faca
     a29eb3316c2150611cd18c2b20d2bf54b5eb401162c4c30fc1e908081239d9da3
     95907054d252e0dea27bdbd4f26e5b15547a01a28e9756811acd4acf4936fd874
     b93856cb998238f8aaf8da6fc7c7196a1165fa9f370eb3b0756fdebc6435d615a
     c38554175dcde3d9144cf84c441ffe65fabfbbfb547aadffa956665204734e1a8
     214d8a5d75569564c3fa0622bab9e7a30131340843e673932bfe038b194391063
     450d5d52e4d6fecd2dd77db3115d444ff2f7477cf062a0dc54d44fc9edc9c051d
     23635120e5a3209d92cc29f8464587b95d64180692d86ef66cd2c097d491fc0f6
     8bb7239038d4b68bb95796f9e8bc9f4c2d77b38f318c0419656c65e6b9a9bc647
     8d4ddd3422c53481d0f429342df516e76773b41119807eac2f2da905a0c8d0528
     b13dfacfd3a945f4f975ccc3d7c5c1f7f9810dff216ef2e9aa01312c9cd6af366
     331ad6566df0f8d0139445e6f375bb9f53f6cd79f97ca16d38fadb0ad99b5d94a
     12d3245045b1aca352c54f5682b5b3f4819a0ccff38e0603bc9ae8b872293cf38
     09db3df88534fdc8d40cd2233e32725c36198dd0f748e3fdcdab3368c2d0bcfa6
     fd8880f340eacb30e0bc7e7ef6f2a997186faf691da8e7e76959199d2381fe248
     cbd78a300edc672cdf49dd4aad306d1d5f305f95bd99cc0a2360fdd6ba8889b23
     f1d356c07565ebebdbeda1a6007686d8173ea3e3b58d50a32538815fa214995fe
     41a5404861347f85d022b4607f77c67a1f1f36bec56321539debccc1ddec51a85
     e65df3397231ffaf4a81a2655c7d6fcf437a406afdacf72142fb1998acedc61c9
     856dd594590fcc63737816b73007e938c0a50b40d5e5d904e94a9ee03a948028a
     8ec75096d34d02e3ad64a22251da6df798e0fe496e1731ebf111035930296226e
     d8e888bbef9f4aa59f4f336439e55afa4790119b036ed42af6c7a5d37c88e2543
     e317a798bf131a98a00ee22c75b83319781b524697ea78edc6b7fd1e2f46a2b17
     5072ea8dab46df09afebcaaa919193a0e8181957c0801ab20c478bb8810faf43e
     899a01cf175bfc2743ea4ed02d24b19832d828599dbde43a2bfb967974d245ff7
     6de51b274619ea107e398952d484e3fdc99bc4942786838d88e68fcb26c905829
     06823c577c82c5efb1d1b6110e9b437731cfe7aca52dae6a5840fda1d263b2a85
     1a9b07386abda2968347d0323c31cb93c01815de263adb9a065fa0bce4e1a3890
     ad6408e1eb22b1505df01960d64970b5221c77b4cd954f8037e46a0d7f7cf072d
     3337528d9c9b5ec47ad188ca903123c512b0e9e93a5ddd348cb2f6f199caaf9d9
     c06c63b6a9db77a69ba1dcdc12e014
shared_secret: 59209bdf6c2a7aa7fea1a1ce05f800850844861d826bbe9c6c7929b
               2f49b5646
key: dd52b66760a144709186273b01c8f7f9
base_nonce: e60a90b9eb89c57886b84149
exporter_secret: 6ed73f25553fb2949e61abd598bbffb50a7db7c9ee21be9468a99
                 1f2daceff6a
A.4.1.1. Encryptions 
sequence number: 0
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d30
nonce: e60a90b9eb89c57886b84149
ct: c71d97814568ede0320d043ef5d711b7827e436cad85cf93a0f914029cfb186d18
    f0ec16c96cee239db9583d05067185943afbf9688fd0d9bfb488db53a61dab37be
    6d376f245e55da95

sequence number: 1
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d31
nonce: e60a90b9eb89c57886b84148
ct: 07e6bcc4d7bfbcaa5a633627610c3f9c178580711556c5719636f5bcf83ae0c97c
    a4d857d236a2cfa29638442de57b258df647e69b6a023ade8d00892b3fc6fb8738
    715a05395e0589d9

sequence number: 2
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d32
nonce: e60a90b9eb89c57886b8414b
ct: 47ae16559a8c2087bd7b270f9c097ba08bc89bcaf0c5a6b141950251ee3022029a
    d65a25457c6e1ee2b8ccac9d1b8af5083da19e6990917d7a00eefffe5ac3518a5a
    03f4049c991f983e

sequence number: 3
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d33
nonce: e60a90b9eb89c57886b8414a
ct: 74073a7c3b95d894536d93ed488d5dac7cf99e951e1305493c3cf55b921c0f82c0
    c516f82cb4b9889301acc09c1ca0b61649e9eeadfab33d058cd5ba5417388c6200
    525cba5cabeaec70

sequence number: 4
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d34
nonce: e60a90b9eb89c57886b8414d
ct: d92a71dd72d6be90be715052c97468a2d604e5c31460a864f6585829277c19b164
    6eb2026a15d27f7bc32906438f0f98251a0c6927b6311217bae5ecbe72d6a707d9
    266693f3329ecd20

sequence number: 5
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d35
nonce: e60a90b9eb89c57886b8414c
ct: 6497966179551a165a528db56dc46a4b40911e689fdd74303a1cb7fb4ef2825d2d
    ea798a81cdbefe477c570b04d2efe4bb006da5ab956a88c189c5e0e17ba840d843
    c933c22e3e248fa3

sequence number: 6
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d36
nonce: e60a90b9eb89c57886b8414f
ct: 52b3561b02bb1feb143137aab57c3cd26af80f0a2428e2f64800b8ab99c455348b
    693ada70d225d9ab934469c286b00852097dca19bd5d51061413e93dbe73f1b034
    19cadeecae44e78c

sequence number: 7
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d37
nonce: e60a90b9eb89c57886b8414e
ct: 595897997185182534c32ef038f0c0ede4a554ecbc10666470e2e54a4ca07e02a7
    d459a696a0e094ce31aeaf714a617a3f8ec5aff70654fd2c359d2b4d83b0753d72
    78adc0091854f1f1

sequence number: 8
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d38
nonce: e60a90b9eb89c57886b84141
ct: 4caf8b2d1126ea6420499c25549dc7618741a4b20d4aee5b690ef8cc5c6d512079
    3eb32110bfb5df2abf4802a1e5411f902f44c9bf0ec8faa5b614e163bbfec2c120
    628a50a9ff8a836a

sequence number: 9
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d39
nonce: e60a90b9eb89c57886b84140
ct: e763e66ffd09c216ddf5b7431d5f21575d88f9e5158c08f04aa520e67bcba63fd5
    8c022cb9832c2cf1d38406e971d55a9cb64602fb7c24b01c1d42ad885e2ea9e1ab
    00f8d320cc97c9d6
A.4.1.2. Exported Values 
exporter_context: 70736575646f72616e646f6d30
L: 32
exported_value: 5f922f98e7e82c7ba18d06ded4d80a583bfab384ec37dd125e08fa
                31b2ee28bf

exporter_context: 70736575646f72616e646f6d31
L: 32
exported_value: 5be9f4e8d58d1ed49265fab3171a64ddfac96f98e635f2c9afda7b
                b83d01445a

exporter_context: 70736575646f72616e646f6d32
L: 32
exported_value: 5a705da1be8ade778edc77ea9ff590c888fc476802b5baff1a6767
                07691fa7c4

exporter_context: 70736575646f72616e646f6d33
L: 32
exported_value: 40ad6b81064c3600995e0ec8ae6dc261295c9e9765682a09167087
                a95cb531f4

exporter_context: 70736575646f72616e646f6d34
L: 32
exported_value: 73313e407d54c2ac82cafdb0a7be137c6b65f5af5c30c55e02f28a
                dbb37c839a

A.5. QSF-X25519-MLKEM768, Unknown KDF, AES-128-GCM

A.5.1. Base Setup Information 

mode: 0
kem_id: 25722
kdf_id: 17
aead_id: 1
info: 3466363436353230366636653230363132303437373236353633363936313665
      3230353537323665
ikmR: 37bd5d09a409215f9794c2dca5a0d8c7c9972fd4ef89a1c1024ea0c8d22598b7
pkRm: 2dd61f745450db497424c2a1bbe6b328d9bf4ee59984b414906b4f4011820860
      4494bb1874d9c1c0c30a04e080ef929ab6aa769d3a691152452ab6b0571b6bb9
      c0c13b6b5ae0372b2a7c67f9810d3b3aba5515b546f671e3459b3de51523d0c9
      2076721983618ed6a5bc383b7bf755f1059a11e657b379180115b0e5b92f39c1
      21afc92dc36564d07978f979775e6b29ddf87730e4c97f50807126b333ea3774
      32441d331804f033e0000936758fd1604d7497a25b1265f7848b3f185ffe1438
      51e6b97df33383e85dabb2187379a486722306105b9967455870392c06b8b4e5
      6688da33dfd506fce082776331d0ac170f3abf5eaa7bc4c5cb95b2111bb40cdc
      72932daa113bc6828dc2818b928d8300448323cf7cba85ebe44aae9c91a7c43a
      d26c90d773886597ced8187290fbc114677af8f4a6fd503521011e21aa7f8221
      1c0ee8644276369b4115bedb4d18fa09cee9c7a4f77444d2c87193b9e60b897a
      7ca6cbf88481a427e8c1a802b1396074676ada115adaa569637c79b2308206b3
      75f8140948b8ef255e93964d7dd105c759b01a8b12553298274763756326c649
      af8cab02f0a840194451314a47a884997aac8d549496c3f9740f79cb79236e17
      e4298e721aef356eca063f5f3559264316c16b410f569f86d3109a014cab2acf
      f65cce7f93159888575d4947eb23c823e58bc774945f984a7fc614be7a8f6722
      703b7046b07b4b385495c00a092c365d188ac9760a77fc6149ab5587d7d32a2d
      a27fcd3736a3f05a644384efa45307b7791931194b60ba305241074696294069
      86096e6992a9388763382720f56064fe165d7fb79c1c5c842ffb63533a3e7ab0
      92e7053d5e518d13cb8aeb302ce7845437d9ce4d8a680fe79f6af6a2f5f19d9a
      a9b33086ab3332a4d4ac89f420ae8721a1114b63b52a67307669ee69887d3408
      efb938dac21c5f1a9cfc60c5b57918dff1a7c1258899e3363c4c3326f008c6fa
      13ea9c7b80797793f09f7d1c42b5e363e3dc779f11141f8720154491d1707ceb
      dab00379b5cd085277bb343ae7896da35c13922340a81074db02d2a9525999be
      d2d9745b642f6f2c4655f1bc2b1312d6c24477c7883b58a7ab1c0048417ac3b5
      6a7de235e5f18c95cb296c6c31b25cc1bbd584c4114a55e500b1c70733a08c6c
      350554cab9a6637a1ba854fbc87227b20bb81a4829d32272b652657126fc9875
      869767e0b5a33378135d9425832b0849547702aa26e6fc7c16206c67b6612e42
      7ea2105544a55f81ca8abf723c28a04b7119c5bcc8afbefcb363bccd8e1393f8
      da8f47aaac08ab263b6006a8a68fa71725dc02b049e90bcd775d2611ad8a2b15
      1d5c76ef44ced3ab8a4793345df38d82d779faa18afc477f3472c7735a5d5e32
      41de272e299b8f6370578bf869d5f174a6c37e54f766b8525db3fa9cacbb0bb9
      6885739122a3a8394af281db45933eb39f0aeb1ef021ae81746d5c09cbf9d2a9
      fa25a6789b9cee4b19a3c049103ac51e8cc9b0b8a0c264ae5fac26fc0b1d40e5
      5c2d60033e2941d0b02638866c952c4aaff29e42873be9aab7daf30216c921cc
      e7bb0335b17d3c9ef7c77914bc6d9955c0488b4ff1948120428eb4d31b73c16a
      73cd0e9bb44fd44ffb4d5d4d36601baf388a9dafa84e62d2a31238f9ab30900a
      a7b41d0e32f85028f609d961f50a6127ad9be30ebb959385e2078fc45f4bc37a
skRm: 37bd5d09a409215f9794c2dca5a0d8c7c9972fd4ef89a1c1024ea0c8d22598b7
enc: a5b762588832d3160d912049c33475fecba61319d09eba5f80fa5be7bbfebbf9f
     340322a40d383a53609d3307b2808ec583c65b2791bac5c3e727052e8fdf6050e
     9dd4bbced027b0e79a593a596ff785bd54f50a019820f49fefdd3eca9a2d9c94c
     3c32b4532d72c169b1505e2a79a2dd7293884a5ea94f20d734b427be96d2c0538
     39a269a07e02bf0c95ce6e1884136804122612755ba5d151b4638615f09f77216
     96684630926f6133d71377c7150c7c36667c5a9270d854c2921591a8ef96b8039
     c183c2aef9a511f5f0ceea573eb8892644d67a597714071727ea914ce1b1b6e68
     ed0ae55ce13b96fd75d36d9f7afb3690bd7b0463091ae7985384132c9c289ac40
     0deafd0c923830512a4323549ac20d50cf6640354dea683ba930b40243feb2340
     2c45f18e4ee3655c206c216830ffabff3bdb0febcfb9f22907a2a93d85514782e
     abfd01bac1f25a689083f1e2fbf3d00646541babb2715145b3a4e8e9cc2d5c066
     4628386896b0529e11c0fea16d2bd5083eccfb257d9b9e888cd8469916e3125eb
     9dc4830b81d0ea962961ab4d3c2a8d21862cb1c99b0485c0826f0ebba04efba15
     a9d2a4a02ff62e0757964dbb98c297cfccb8068445f94b081c1bb3e53f2783f71
     4fa4e96827070d1b7a906b6c55c19beb03eebeb9e21e1b976ba7fe26e8ef46390
     c027c7d6d1a8faa821b221875eee55762518d9a14959da7c7a6ffcc8f8aa89698
     9bec6cac8c9edad6a36dc58317881fb5c774f6b6a8007fdf43205532f84778e90
     c6a9809ed6a0e499be144d8b3e790521da05c0d7ce0a836fcff932904e4f6c1ef
     c931764f07b765f533ae10910fcb8dd8399ac8751a773f77216502c21d2ea6384
     c8969d6b0f3206fd6d0ba5767f7b8904d7fa8fae513d4ea5d377e39575b425df6
     909eef667e8bc2bf40524f6ed598d65023b123dffde42a3286d0949e8acbf4bd1
     f27c9271d5098fd344196d0f1d90f8a39bbb684e329834184c44366e56b9a4937
     26a57f4aa42a0e81340b6fb683e7605d502e6e405cd0f5772d66215cd2bb82a81
     af9a1c1839fe8aa3504447cbca9cf04217ff56e13610315cfdc38cd247aa8fc25
     c154678c67aa3227ffe698c8f9deb2c36c6f99435a2cbd7b489747dd066fed208
     74aab43c1f03e5ec20d2a3f3f9801b7bd348d50e80c65e8c5de69d01c16dafd51
     a692066d691235c54b36ea151a0993af24a207c754e11812ecf16818dfc2e8c1c
     fca8b1067a17abdd443706f5f603ea70f99faffe4501bd5d5b6cafb8bdf1f2b6d
     0879a0b1f243fa1d10d27ded5c4b1bdc4020244adcf6fa1f8fa70594a359b1616
     ba62853971c693fb786bc38da738f8b6c6c40d79e7c52b27863f7ebe7e9d6c78c
     a6cb45c14926d8c7f4cc951a18ca1e29070eccb2d2cc993b9d089d6a0541dd637
     e3ef9f6c1abe88041dd2ff0aa4a8aceabafac2c88b74e739f3bf52ecbf425cede
     0b7ee56a38c01949a11d6b88f732de0057ca4308b3d5e1d10c5916277218c4d7b
     3f0b49d3a8feab9de8915c5d65a0f9f73c286bc6c5ea3bd390669dfb90e2b6910
     1ee29500796295893a2e74029c9824
shared_secret: 5aa38b5e134f031da52d1391042fe7be41e8a319fdbdfc7a73264df
               e6317ae42
key: d8d2b85f3a7cb8ef2896730fbbeb317e
base_nonce: 6ba494e85fdbd2515f1c2ced
exporter_secret: 27c10f7be3322285e7340999c124c2fba927cc265527a46503e72
                 c4db72fcde8483519b2abdd630e5f6ea24ed45d99c6e7be26aae7
                 45d0711f03de1c927efe98
A.5.1.1. Encryptions 
sequence number: 0
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d30
nonce: 6ba494e85fdbd2515f1c2ced
ct: 08ba79ab1619d0d85e8379035a163af8823df55b1a05360a229c05bfa9bc2aebb5
    a197009f650f0fa77168cd45eb3c7c2145b8889978c19285e1dc641ececb73ddba
    31bcaae3662b5cf8

sequence number: 1
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d31
nonce: 6ba494e85fdbd2515f1c2cec
ct: 52d1ddc929634cc84f09b24e11b23cedcc5886a6e30f9fa9947e910629e3820f31
    61822eecfa91d9155a6e6b4a5707852c25542fe9f031f1499d8d837db4700c3bc9
    55cea9d70bf4e65a

sequence number: 2
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d32
nonce: 6ba494e85fdbd2515f1c2cef
ct: 022211e40b45313faf7dfc4f97d51e01609b1b606bb9f09b62f7c15f8cfae06cbd
    84c612dc8c6080d365a625b8d1416ab1fbd51a6444103c69426c00b9eaf44bf77b
    6594dabba3523083

sequence number: 3
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d33
nonce: 6ba494e85fdbd2515f1c2cee
ct: 83469e8f2a3a47c149cfa8941f0ef14693fe689cc2c8dba859496e3a05809a2573
    8a88b84574dc0d1fb7eb4bb089d04ef24d783fa6c765e082ac067951eb109f8541
    1cfee19b0e92af81

sequence number: 4
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d34
nonce: 6ba494e85fdbd2515f1c2ce9
ct: a869470a472d44efa99cb23b77cfd39864adcca293e25528931476c3c3948847e6
    51005503d1fad46525d2380355d72a4e81a3e96e57c828b954bd033ae687f4252c
    6b98b45c5622961c

sequence number: 5
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d35
nonce: 6ba494e85fdbd2515f1c2ce8
ct: 7b323e878e03c6714d473ea176ccf207bc7f08f33263a71402026be8ad8a490e80
    e9a5491a69889bc5ab7d3f7a59237d9fbbb64fab7d6b602bee3ef953e666d76d3d
    d4c35d4d0e088b20

sequence number: 6
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d36
nonce: 6ba494e85fdbd2515f1c2ceb
ct: 22bd214199cab730f9b2ef300867c1febc6d547a633f8a61adc832c58459fa54ad
    7be043bc356b25eae1d6452923163fd17f582c2673b3d3c36c32ac6dfc4473f309
    9896f910c71dc97b

sequence number: 7
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d37
nonce: 6ba494e85fdbd2515f1c2cea
ct: 4a33a93aefb541fc4633c9535f36a742cdb79cc592f5a7690d04174546653da12b
    7bcbf0c85c93bf004f04294a7a61db7f6c6f40c0250c437a514ea5627610e98a10
    58aac25f71b2d726

sequence number: 8
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d38
nonce: 6ba494e85fdbd2515f1c2ce5
ct: 63fb536d5369f9a71b9b3d049e8bb69464fc226b430ab030ae253ffb50483fa90a
    1df66645b3bd7825f8cc27f3ec75916982f62b18e7dc7669073d10b104763edaee
    d8ebb6ca0ba3adbe

sequence number: 9
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d39
nonce: 6ba494e85fdbd2515f1c2ce4
ct: 5ed268d91b1c588e3e70a32fe240d8d7d35721cf3f7db48dc83497c7cb3391d9ef
    37230e004963712d0b8007f2119088882909e7132ae7cccbd5657cbc52fbc29b85
    8f017d7166c61aa5
A.5.1.2. Exported Values 
exporter_context: 70736575646f72616e646f6d30
L: 32
exported_value: 6702461a04e3791b4f46960da1a7890525b1aef975efa1b0afcdf9
                25ab490b2c

exporter_context: 70736575646f72616e646f6d31
L: 32
exported_value: bedb17cd01a0cf2f0cd82b89dc72ec321386ece5bc2f69443a0e2c
                0e93e28353

exporter_context: 70736575646f72616e646f6d32
L: 32
exported_value: 2fc51acb8231a748f30aceb7bb77727482c44ea8c3b8a62d104d02
                c336de479d

exporter_context: 70736575646f72616e646f6d33
L: 32
exported_value: 40ea20e82219debe371d81ad820df912c34f493b671cd9a43d332e
                33fa22dd69

exporter_context: 70736575646f72616e646f6d34
L: 32
exported_value: 5bf925847e7cfc750f00d50bc951d9d92a2f92a273d528abcde032
                d3df464c34

A.6. QSF-P384-MLKEM1024, Unknown KDF, AES-256-GCM

A.6.1. Base Setup Information 

mode: 0
kem_id: 81
kdf_id: 17
aead_id: 2
info: 3466363436353230366636653230363132303437373236353633363936313665
      3230353537323665
ikmR: c9017084076fcfd25c5b01f5dd1d5e819edd97532bc809f13ce75c305aa62e28
pkRm: 1eac2e8fc7bbb35863b4f2c532b32ed8505f731814c86993a319343e000fb2d0
      1fb05357e7694689687f449c4dc203912e2b7ae0527487f7bd5aa8a19f896349
      59ce4b58826e300a04b926f15c2abbc662f1894b329c0b340bb5a9d061ec6069
      37f04f73c380b1d7a3fd221796b478f6b24071e59df6672ac42cab121a82ca1b
      5aa6c863a1279a995592cc2b2bd2276d4d287d79338b1cf29ddd50b2ba7b1bc1
      fc1cc9658c732573b836814fa8751650ca57916f0439a789d9950e845f012b10
      c8b9a5fa9133aaa1cb7cf0b70508b6b8a0714f49530cd86b6cd11f9657b2f713
      cfd9848e8e8a9516dc0052649ff2d827302b26effc89688815204a61fc6192dc
      52484193944899a660ba20b9498bff90b073ac79e4800660b4a2e2889ee28c6b
      a2b6402883bb34fc20a666a728a1a6c4dab266d010723bcb8d5242c1d29b1421
      a7b9c91347a161fcc466b4885068e200f88124d4302dd7506c86d19ee9e97c72
      7630c8948af3e367be9324ae2c0cd94474cb185740087e81b42b152c6462e630
      8bb36643975bb635479a48c7d7d32824e3a8f10abac800c7e0c82336d86ab086
      0ba650c97976cc299b445d6c0a20e16569e4416ccc6451375fc80712bf655c13
      a23bb8ec9fec734859eb5ef2b99b3a25a1fe127555a1c8aeebbc04f02c5b447d
      7e89c5af1b9a571a7dbf033235f797cc477d09ec989a80ae49b19407640ff442
      7802ca99e72b57e3f88d9a578abd06bf4284219f678a7e275b8d581cdb1110b3
      7cab680c913b639b9fa1a534e6bac31822816c378b2a5b2ea381a0a8b0210b65
      483c919a4a8cf5c49663341b22e92e41ca0b6282aeb231b0c1d229a9b659f9cc
      789e21523a013307eca672636d23d54317b80318fc0ee4ab0409db75ffb818fe
      479ef9e29a6a9446f0f91965e02213103d988c7f776065eaa345251370113511
      0311b635b42cb614414ca35ab3e660a7b973f70236bf060a5a0b42079c63f700
      868a21a51c15579d125343f416f499149882a948aa15c47ab865366b695b0623
      9661f38912cfd25943a128f3a70f81e04819088e2739b73a082d4513ac7f0a20
      6c3349582a517169a4bae6a92e233a2b6146515180b2c85af31a9aba931ef838
      24ae314a74bcbac91778813979ea428c99357beca83bb4d27a55bc97896754a1
      61c9091130433397ecba68a4c6a7b3d0137a1632a75945800ab41fe1a621c8a5
      faa400ffb2c110ac632888ae63a736394674193312bee70e05b482c2c22c6620
      a9241a00390b5a0d523e972cb86de54c4cfa30cae62d6aa84086cb492ff71582
      a955715c4e435367e5a2b899607a97fa5f8497a6a7f2af6521beadd91af17a14
      494242ca14bf79d9a0181b76b8a0527ef447e1644a583317c40ab930f7b5d871
      5035163ff7a1951840cbdea6638a1bbf4ae90030524d5a95bb9a7a2e9f31980b
      449b167421d3803fb8a742d06c4c656845ebc1927cc727827b0e1287c1a04b53
      2d10c2edb4c2d17165749ab6bfbb1885d1b414f3119155503d88724bd0be8595
      37751068477061d66bcc14891d4392bedc9b26d3790c9c2b3fb573a630a87878
      4b2e13db3e4217931620b2fe169ebc701949b55cf10a3ee100714ad439713c4a
      2de7cfa108a20b24ca045306390305472744c5c435cf2c8604fba3240626d1dc
      84ef311c52d8801064b0e335a3323032fb382d945812229437fa8ca01f4c2d67
      64bb02f593a5902603978e8262a0201138faf33e3c77552e35cd6235572d2463
      6f7a453736216c4605a40243744763c878c45c762f4186c5f26a708ffa10c587
      8ae1341f70999e619177f626010d37ad8502cbc2d67fac41985ca9435e22263f
      b2111cbc400fb09d0609656830a963913f77470d2289681deb089917aa71795f
      78b68f0643c1fa18ccd0a66e17bcbeb3b219af3acb3f926d3b3906ecb50b5c33
      2785413a94fc2340c532939846eb3899b4795d40277182aab1224c727c8229de
      02952a29c345f44972e69222fa166bc3caa4388aad49339e8457c049c4866453
      24c177d57436f3e12ccfa9a386db0aac68cccc6446b1659808d84b518641d4b5
      c06325c0e52b2ad3e07c6f126903a3c319e99ce606216fe51284f037474078d2
      00a70de984c025057a6c561209473188a07fa8243ac670a25846b9f1a7c1922e
      58eadd26f46819b38f8489c6432b5dbb53219b3caebe4915f90f2cb958fcbd6c
      04104341acb07e1d3581aeb16126b95effba15311ae1e5cd1c33635bcf4a935f
      d207fd56b0b133555ac17448dfebffe00ec5cf372cc8d15cfab31c27d28dfd45
      a9604681a8df561b54da4fdbaf733d796c2685a05204545a23102c59614e6c6e
      8c
skRm: c9017084076fcfd25c5b01f5dd1d5e819edd97532bc809f13ce75c305aa62e28
enc: fff436b0f30aaa1817ef2711fe62ec132ea48153dd1cb461f1d1da062f8c32caf
     91b72dab5ce02a28764bd8aab42a7efb7feeee6db6dcf87cf250b93b15cd3853f
     edb076964cf80f51b0f7e91bf507e69c55b6dc4d8be6b076855013ba6ab76dd69
     3cfe1bed7adb03c09f87ceb4a43b15e00568a57a32619d07147b59f017d9006da
     fb0e3e6e64fc23af0a05dd5508c707bf99eb6a5dd5b7e1f3764ddc29d900482a8
     b52e04e0c2c8b1cea7775967e300ba3f75c8f63e19c97e56a9b94de7806b93637
     32df8eefdd574f24a8cc9807ad9c423f3b56bdc7daa8df2d7318438c5a2154454
     c74146a69597874e2bfeb30dc9ebe4af3f02f50208cbb8a39e996df676a64b42e
     590bd79d884e47ac832938469bfb44bfa7b4fff13a5826d01454fb9d16b29ad9f
     d88b6ad146e9d5437dd10ed5c784e11a0af8c0f1d97c959178e0a26f77c9e9195
     010c1efff3cc6aea7ac32dc4e293451ee1ef6c378369f7ddf77f52284447cd692
     d203587bf4cafe0fe09ce2b5589a44e120cb8198ecf443947aec55c9fde9514be
     c15624ff211af9890576774586b108597b9fcbf87aabdadd7c0ac1be0969d54bf
     95f2eeb056d136bd04f6fabf52039129207a744465564c1a3a7e448fb8fe01e59
     bed04b7f578f2fd665842a9a990b6135fc0abb08b42d78f2a5d91c33d8592968a
     f61eac6e90782f91920d22f5cd952b057421b65c69fd90b03a094e7170bca2c93
     e578b44cdd8c4a116df12c8fcbe9200fd70b7bef1a45ab2be33ebb1b4b9b46241
     062351811e2837294ccc363dd0c025bdc045d28f41f4b507f2aba3dfa5e7e215f
     909d00d2cd7c7a1085e31d7220423b718f93cc03fb22b101c244690ff919331af
     c26e7dd6581ee3c1b3321dd6ca47fd065f79a7bd1e826500c530951b26658445c
     043b4c4ba9c68aa127bc73b9450509e0e5aeab8e73178adc5b122c9793f74c3ef
     0418ff6378bf0a9832b4066722de3102889b3411f769edd025fdc19d1a3801f45
     65bb946c87c0882c5068c704489cec785d6e7e966e22fe047263e01f01e6f4f41
     13ea6f629c6ac19f896b88e18d640007bb7072cdb41c44711af563a105602908d
     4d032702e9ff93366ef41368f55c6b0de6e9a3a9119421c5761c18b78ebf97b5c
     75c6c019c45c5136289283151fa707ced6fc717e96422653ee14ffa80548c77e8
     914d5138798191b9f97dc9c56357bb9cc7cd40fdd3cf63f731667dc38b5eed5b6
     c7800f95dce1003cba798f6ed11debca74ad493792bf458f6bd64a4f9209d7f98
     cc4efe786b6e5b510ba6c8717cd352cf48218a83dd31740f5a6804d966b02842b
     d261a8fbbed70507c5dabbc38187bd0f67f2b2fe25b9be5c2ac647b12b3cdb0e2
     6d0ea95bcaeaa67e0bdbe8078cf5d825b590f248c0203854cb015fac69b0f587c
     86f40188878ee3890546f6a84d64c2b9bdc78bc8a4f3efc647c6b5460371de4c7
     37472b8a3f023dc71d719a911a1c7a9e5946f38115a0547253104021d987c8e22
     ab04d38decb59a27407b6846e16d800ba1bdcaebee24cf3a616711435326125b7
     8bdc746b4bd3d2516526b1bcb8e5ef2b3b849fd7a5c862c3a2d9916d63ddb57f4
     2baced9199b7a7ea51cda664dd5a016d9f0953b955d790fdcd0acfcf2ba6bced3
     e3fddf2cafaa75f26043d6d160f3a3fc4474491306d1ece5576d92e50f8754fc0
     19f93a8a577ad33f514b258336ff2602ebca07977268d9225920800d6f6f532bd
     7a71439932a9617314a4dbeef24991a7674c22679c484332fb72efd7b593f91eb
     e8950453dfa98f0022f7f12d62c49857e19bd25052b2d1de880a0b22baeab55ca
     f9e02d19e834dce8c52cf9a43f87e832130a7a9aae3f42a8e7a59d31b4b66cfad
     90acb525e43cd3e0fa90e0752a67d2a17491728bb594123ee7a85598a79d6673e
     ec3f5f0ccc739ed46fb94416a6e32648074aea1a63d44fc6d2e541cb703015c15
     264bbedcad0f022bb212e18871f2711434e1955e3710c0804b53cb7621343e2e8
     c4bbaa5853fbf089d09fed45b3473d88b0e033be99f062048d693c87fadd6a167
     311c33a6eb5c3816fa61c72da1d92df88a1ab16a30aa79cc562538bc8557a4da4
     8a6e62baba065b45d1d5139c02ae6c18fc044e183246af13690201f79caf1ae9d
     94fd09f36de63a0ec9a8cc53af4428615b0ff730ebeb69a9d049b005ec53d312e
     5b96eb0c08edd250044b1d55aa47558779fa081a380d94e060343b88746d27661
     c19a10778d1569aea18aa60c8f6a54d25a9c5927d6ef79d0ffd158bda865e7002
     b53f8d4399b51044c23047753462aad341ac07bf36693837c41e528a8fb1e9c63
     66e494a75aaf4a2
shared_secret: 4024d2b6a80815d41d634c752cd688f69372bf85a42c8a12fe41142
               33117991e
key: a38ff0e2c15f928842942cb9503be43a089303387fe3a807b9e424372e19489d
base_nonce: 98d599595739024ef812dd02
exporter_secret: 00d2960c767e39ee986403f0189f3a013c5f767a3431e1d87ac96
                 e3255fc0b8ed4e96d5405d3a5f4d11d232b83adda06adaf76d978
                 aa84feff262d6404e16df5
A.6.1.1. Encryptions 
sequence number: 0
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d30
nonce: 98d599595739024ef812dd02
ct: 4583cf4afa400963833e84e54103594b767e9848fb8995d0da890546ada0fa6a21
    c39bb536cba572111f74390f3280d1d62b50271dcf45fbdbfef3b5d59da07bbf7c
    5cd28ae2b7efcce7

sequence number: 1
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d31
nonce: 98d599595739024ef812dd03
ct: e1968ff6eb918676e823ea37890f7af05eeaf808e110a86a1231fecb4794bb4bfc
    4627e7fbec7a4824d196a032d84cdc02f07d7946792833bc4bedbdda2d765206d5
    9a5358ca48a34865

sequence number: 2
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d32
nonce: 98d599595739024ef812dd00
ct: c659981b9932fad89b5d149528f20ae8588e53c587dcfa2319f444c4de74cbf507
    d0105add73be67c3bfed3575bb53f3e6912bc55e17904803ebb2e84cf7da35f077
    206cb9a34007dbb0

sequence number: 3
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d33
nonce: 98d599595739024ef812dd01
ct: 6243d1be6bd072bdd0b61499da2fc7daaf06b6eeef4438467f0054e7e8456f5b61
    37b1b3aec9daf800d06e739ac5f1475f85c74fa132d7be9b18f9fa072b6be9286c
    dfd678c8501ddd24

sequence number: 4
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d34
nonce: 98d599595739024ef812dd06
ct: d6a09cddc1d00b9cbec156fe67b9fe50c64e9df1155f766f3dbf29f4cd1a0c53d4
    337ebeefefe3f552305cbafc347b762077ef7dc835438e2dca5d5703464ff1cd92
    399bfcd9fd461613

sequence number: 5
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d35
nonce: 98d599595739024ef812dd07
ct: de74521bff80a934c1b47d3d8d9e17a2ee2c188ecf9478e7c25c9dc5205e57c70a
    7692c5b554ab9c5c044fd96cb115204dbeeabd78e6cca4a368069aa761206fcbc7
    2b8ee0d59f6325d7

sequence number: 6
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d36
nonce: 98d599595739024ef812dd04
ct: edf75b184b42d5c41327aa047e2bcc9971b24c6b545b7464974f206293b6ff183e
    8db14c529432058c60d7bf42fb6aa1fb0ec0215853049bf1f5ca81ddd9ad139da3
    4145a7cdf9656d0f

sequence number: 7
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d37
nonce: 98d599595739024ef812dd05
ct: b90e85a1f41914724a98936668b04f1ceac8e6766a43fba7e668209332fe645107
    dbf8bae82e694c913d94c760f99ee4bd0ee2497848760af6ea3d4e6547a0c0a0b6
    e6e4c06da60d9131

sequence number: 8
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d38
nonce: 98d599595739024ef812dd0a
ct: e58ed965ae18f8a0b4426cdf17c7638b40918bc7c1461fbdd843ffa14e65a99ded
    b27f42dc209495d8262fa56d07928d76c76ffc241067e3ba6099dda4536b1160bf
    fcca9566bb456260

sequence number: 9
pt: 343236353631373537343739323036393733323037343732373537343638326332
    30373437323735373436383230363236353631373537343739
aad: 436f756e742d39
nonce: 98d599595739024ef812dd0b
ct: a21dff455b4c23c96a7dc8ccd50417f116ea3ee6c89b94da599f59de83d4844a8e
    067bd11729eba292a3e503d31f5b975ce472cdf2c2d08eef90d08dcb32ffd2c873
    35d15b1a07704302
A.6.1.2. Exported Values 
exporter_context: 70736575646f72616e646f6d30
L: 32
exported_value: ffbbf2aa9ca72de7a9a2452ba6578662e3ae196f24eb08c90ee24a
                b991d2099d

exporter_context: 70736575646f72616e646f6d31
L: 32
exported_value: 7db689e2b4b1e5901b59130705e72f53bbbc39d6039f8d410b88b2
                bb08a0b51e

exporter_context: 70736575646f72616e646f6d32
L: 32
exported_value: 9fafd36e1de743b74ad7e0d18c8b453a3b84d71f2bbf4de6e0cbf7
                de72c765ed

exporter_context: 70736575646f72616e646f6d33
L: 32
exported_value: a0bdeafef546f3dc427ee542a999804cd7b464fa7ebc3b2382400d
                6289d3efcd

exporter_context: 70736575646f72616e646f6d34
L: 32
exported_value: 72c257759754f7fca674ce2be81d6da5bc0df6396b5e405bdc0d89
                f445c8df79

Author's Address

Richard Barnes
Cisco