RSA Key-Encapsulation Mechanism (KEM)

We discuss how the KEM scheme works in the context of RSA. This scheme is part of the ISO/IEC 18033-2 standard for public-key encryption. Further, it is both CPA-secure and CCA-secure - if the key derivation function is a "random" function. There is no notion of padding.