This service is gRPC-only (the PBKDF2-SM3 Chinese-cryptography variant, no public REST surface). It is called over the internal network via gRPC and is not routed through the API gateway; the specification below documents its capabilities and cannot be called over HTTP in production.