{
    "0": {
        "description": "hybrid PQ DEK seal: X25519 age recipient plus ML-KEM-1024 recipient, AESKEY = SHA256(x25519_shared || mlkem_shared), AES-256-GCM over the DEK",
        "provided_values": {
            "kat_seed_hex": {
                "description": "Seed used only to make the X25519 ephemeral key, ML-KEM encapsulation, and AES-GCM nonce deterministic in this public KAT.",
                "value": "9b3386563d0f0bf57e6a217fe534344cad00459acc6e3e9b908bc47a7274c370"
            },
            "dek_hex": {
                "description": "Public test DEK plaintext. Real DEKs must never be placed in vectors or argv.",
                "value": "534843205051204b4154206261636b75702044454b2076313a207075626c69632074657374206d6174657269616c206f6e6c792e"
            },
            "x25519_rung": {
                "description": "Existing SHC derivation rung reused for the classical recipient in this KAT.",
                "value": "recovery-card"
            },
            "recovery_card_words": {
                "description": "Pinned 24-word SHC recovery-card KAT. These words are public test-vector secret material.",
                "value": "drastic bamboo mountain loyal category cancel animal embark drastic bamboo mountain loyal category cancel animal embark drastic bamboo mountain loyal category cancel animal embark"
            },
            "mlkem_keygen_seed_hex": {
                "description": "Seed domain used to deterministically derive the ML-KEM-1024 keypair for this KAT.",
                "value": "9b3386563d0f0bf57e6a217fe534344cad00459acc6e3e9b908bc47a7274c370"
            },
            "wrong_x25519_seed_hex": {
                "description": "Seed for the non-matching X25519 identity used by the negative test.",
                "value": "68f955f87b96f6660738a60782aa07e29022ab23b904cb1bf76d84c8937d8854"
            },
            "wrong_mlkem_keygen_seed_hex": {
                "description": "Seed for the non-matching ML-KEM private key used by the negative test.",
                "value": "9e31574806b9ba4b93cf2252f0cddaedfb7bfa86ff99ae01c53d36dfd7168e3e"
            }
        },
        "results": {
            "age_identity": {
                "description": "Age identity for the KAT X25519 recipient. Public test-vector secret material.",
                "value": "AGE-SECRET-KEY-1GFPYYSJZGFPYYSJZGFPYYSJZGFPYYSJZGFPYYSJZGFPYYSJZGFPQ4EGAEX"
            },
            "age_recipient": {
                "description": "Age X25519 recipient to which the classical leg seals.",
                "value": "age1zvkyg2lqzraa2lnjvqej32nkuu0ues2s82hzrye869xeexvn73equnujwj"
            },
            "x25519_public_key_hex": {
                "description": "Raw 32-byte age X25519 public key, hex.",
                "value": "132c442be010fbd57e72603328aa76e71fccc1503aae219327d14d9c9993f472"
            },
            "mlkem_public_key_hex": {
                "description": "ML-KEM-1024 encapsulation key, hex.",
                "value": "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"
            },
            "mlkem_private_key_hex": {
                "description": "ML-KEM-1024 decapsulation key for this public KAT only, hex.",
                "value": "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"
            },
            "sealed_blob_json": {
                "description": "Canonical JSON seal blob. Binary fields are lowercase hex.",
                "value": "{\"aad_hex\":\"7368632d70712d7365616c2d7631\",\"aes_gcm_nonce_hex\":\"2b752f947beb0190e825c248\",\"alg\":\"X25519+ML-KEM-1024/AES-256-GCM\",\"dek_ciphertext_and_tag_hex\":\"cdc8075a4ac039f64f89ea92503691e543fe6b3c0c1cd1bc4b9391efca6344d6fb1282544d5ce61cc5ece4e8a048b137e30297fa2827baf6195bab308cf4674e39e1e462\",\"mlkem_ciphertext_hex\":\"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\",\"version\":1,\"x25519_ephemeral_public_hex\":\"3514334761d251907dd7f13961149abb0f267cc11a24611cf14a3043e0ef9745\"}"
            },
            "sealed_blob_sha256": {
                "description": "sha256(canonical sealed_blob_json), lowercase hex.",
                "value": "859fe9f4c59ac72f4cf4fbbd305fb98c81aaf673d8bf8bb0f435e171b3c73fbe"
            },
            "recovered_dek_sha256": {
                "description": "sha256 of the recovered DEK after seal->open, lowercase hex.",
                "value": "172047913475e77cb0ea54d623ec2ce46abe0b8b531fc6685d2addc9db500997"
            },
            "wrong_x25519_fails": {
                "description": "Opening with the correct ML-KEM key but wrong X25519 identity must fail AES-GCM authentication.",
                "value": true
            },
            "wrong_mlkem_fails": {
                "description": "Opening with the correct X25519 identity but wrong ML-KEM private key must fail AES-GCM authentication.",
                "value": true
            }
        }
    },
    "x-shc-release": {
        "version": "2.4.14",
        "op_fingerprint": "0d5fb5e3c79b60a61c624eec5346341cd339c3a715bf167f88a5a361c79f7c76",
        "op_count": 174,
        "contractFingerprint": "234bf08dbdb5cbf9be22b8ccf594098c5f795c01cf3100f88e8f3413a641ad6d"
    }
}