Which key is required to unencrypt an encrypted core dump when using vSAN encryption?

Which key is required to unencrypt an encrypted core dump when using vSAN encryption?
A. Key Encryption Key (KEK)
B. Disk Encryption Key (DEK)
C. Host Key
D. Internal Key in Digital Envelope