As part of the choice of the underlying block cipher with a KEK, either the forward transformation or the inverse transformation.
Source(s):
NIST SP 800-38F