Synology actually uses PyKMIP under the hood. They basically use it as a key-value storage for the encryption key, nothing advanced.

I went down the rabbit hole and implemented the KMIP client and server, that pass the tests from OASIS.

Sidenote: please, somebody nuke the OASIS from orbit. To be sure.