ASYMMETRIC RSA-4096-OAEP + SHA-512 · 4096-bit modulus
SYMMETRIC AES-256-GCM · 256 bits, authenticated encryption
KEY WRAP Ephemeral AES key encrypted with RSA public key
NONCE 96-bit random IV per operation (never reused)
AUTH TAG 128-bit GCM authentication tag (tamper-evident)
STRENGTH >128-bit security (NIST SP 800-57 rates RSA-3072 at 128)