X9.143 (TR-31) keys

The key usage, key algorithm, and mode of use in the block header controls the key separation. Any IBM optional blocks may have additional key usage and key management controls. The block header and all optional blocks are cryptographically bound to the key block by the message authentication code (MAC) generated when the key value is encrypted under the master key or a transport key.