The docs for mongocrypt_ctx_setopt_key_id say that the key_id is a mongocrypt_binary_t but they don't describe what it should contain. From Java's implementation it looks like the key_id needs to be the bytes from a bson Binary subtype 4.