<?xml version="1.0" encoding="utf-8"?>

<xenc:EncryptedKey
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"
    xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
    xmlns:dsig11="http://www.w3.org/2009/xmldsig11#"
    xmlns:xenc11="http://www.w3.org/2009/xmlenc11#"
    xmlns:ghc="http://www.w3.org/2010/xmlsec-ghc#">

  <xenc:EncryptionMethod
      Algorithm="http://www.w3.org/2010/xmlsec-ghc#generic-hybrid">
    <ghc:GenericHybridCipherMethod>
      <ghc:KeyEncapsulationMethod
          Algorithm="http://www.w3.org/2010/xmlsec-ghc#ecies-kem">
        <xenc11:KeyDerivationMethod Algorithm="http://www.w3.org/2009/xmlenc11#ConcatKDF">
          <xenc11:ConcatKDFParams AlgorithmID="0000" PartyUInfo="03D8" PartyVInfo="">
            <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
          </xenc11:ConcatKDFParams>
        </xenc11:KeyDerivationMethod>
        <ghc:KeyLen>16</ghc:KeyLen>
      </ghc:KeyEncapsulationMethod>
      <ghc:DataEncapsulationMethod
          Algorithm="http://www.w3.org/2001/04/xmlenc#kw-aes128"/>
    </ghc:GenericHybridCipherMethod>
  </xenc:EncryptionMethod>
  <ds:KeyInfo>
    <dsig11:ECKeyValue>
      <dsig11:NamedCurve URI="urn:oid:1.2.840.10045.3.1.7"/>
      <dsig11:PublicKey>DEADBEEF</dsig11:PublicKey>
    </dsig11:ECKeyValue>
  </ds:KeyInfo>
  <xenc:CipherData>
    <xenc:CipherValue>DEADBEEF</xenc:CipherValue>
    <!-- Is concatenation of originator's ephemeral key (expressed as
         an octet string) and the wrapped key -->
  </xenc:CipherData>
</xenc:EncryptedKey>
