PBKDF2 KEM. => RFC 2898, PBKDF2 kem-pbkdf2 { {field . {map}} {field a {str} =pbkdf2} {field cek {bin} >0} {# wrapped CEK} {field hash {str} >0} {# hash algorithm identifier} {field iter {int} >0} {# number of iterations} {field salt {bin} >0} {field wrap {str} >0} {# key wrapping algorithm identifier} } Key wrapping algorithm may be one of: [cm/keywrap/xchapoly], [cm/keywrap/kexp15], depending on the hash chosen.