Do we want to use Synthetic Initialization Vector (SIV), RFC 5297, or traditional RFC 3394, for key wrapping? Do we use the same mode for both external key backup and internal data encrypted by the Internal Storage Master Key. jakob