PBKDF2 KEM.

include [schemas/kem-pbkdf2.tcl]

PBKDF2 is RFC 2898 algorithm.
Key length equal to key wrapping algorithm requirements.
=> https://datatracker.ietf.org/doc/html/rfc2898 RFC 2898

Key wrapping algorithm may be one of:
[cm/keywrap/xchapoly], [cm/keywrap/kexp15],
depending on the hash chosen.