Interop test with OpenSSL for indirect POP for KEM certificate

[rajeev-0]

Hi,
I am testing CMP feature indirect POP rfc4210bis, section 5.2.8.3.2 using OpenSSL client.

But as of now, only 3 KDF algorithms can be used as it is hardcoded.

bc-java/prov/src/main/java/org/bouncycastle/pqc/jcajce/provider/util/WrapUtil.java

Line 106 in f4ba48a

private static byte[] makeKeyBytes(KTSParameterSpec ktsSpec, byte[] secret)

We were able to successfully do the interop test using the SHAKE256 as KDF.

It would be better if it can be extended to use HKDF and KMAC as specified in draft https://datatracker.ietf.org/doc/draft-ietf-lamps-cms-kyber/04/.