It is unspecified both by standard and by fact of implementation which one is actually used, and yes, doing so requires an SP be able to decrypt with any, assuming use is omitted or ="encryption". -- Scott