The sentence states:
To avoid the overhead of decrypting RSA wrapping, implementations may unwrap the content keys when the KDM is first processed and then keep the content keys locally encrypted by AES using a local (Security Manager) device key that has at least 112 bits of entropy.
Annex A is informative; therefore, it cannot contain "may". Suggest replacing with "can".
The sentence states: To avoid the overhead of decrypting RSA wrapping, implementations may unwrap the content keys when the KDM is first processed and then keep the content keys locally encrypted by AES using a local (Security Manager) device key that has at least 112 bits of entropy.
Annex A is informative; therefore, it cannot contain "may". Suggest replacing with "can".