pub fn ml_kem_encapsulate(
transport_pub_key_der: &[u8],
) -> DogtagResult<KemEncapsulation>Expand description
ML-KEM encapsulate against a transport cert’s SPKI DER.
Calls EVP_PKEY_encapsulate via FFI (the openssl crate 0.10.x
doesn’t expose KEM operations yet). Returns the KEM ciphertext and
the derived shared secret.