---

PBKDF2 KEM ¶

kem-pbkdf2 {
    {field a {str} =pbkdf2}
    {field cek {bin} >0} {# wrapped CEK}
    {field hash {str} >0} {# hash algorithm identifier}
    {field iter {int} >0} {# number of iterations}
    {field salt {bin} >0}
    {field wrap {str} >0} {# key wrapping algorithm identifier}
}

PBKDF2 is RFC 2898 algorithm. Key length equal to key wrapping algorithm requirements.

Key wrapping algorithm may be one of: xchapoly, kexp15, depending on the hash chosen.