decrypts the context data according to the TPL layer.

This function will decrypt the encrypted bytes according to the TPL encryption mode.

Is tpl encrypted?

Get the number of expected encrypted bytes in the APL binary

Return configured encryption mode as {:mode, m}

Retrieve keys to use in mode (either :enc or :mac).

This applies the selected KDF to the master key(s) and returns the derived keys.