Encrypts or decrypts a cryptographic key under a Key Encryption Key (KEK). Used to securely transport or store keys by encrypting them with another key — standard practice in HSM and payment environments.
Inputs
Operation: Encrypt (wrap) or Decrypt (unwrap) a key.
Algorithm: The algorithm for key encryption.
Key to Wrap: The key you want to encrypt/decrypt in hexadecimal.
KEK: The Key Encryption Key used to wrap/unwrap the target key.
Tips
Key encryption is used in TR-31 key blocks, HSM key loading, and key distribution.
The KEK must be managed with equal or higher security than the keys it protects.
ECB mode is standard for key wrapping as keys are high-entropy random data.