debug_ge("Z", s->k.g, Z); )
derive(&s->k, R, Z, "cipher", s->k.cc->name, s->k.cc->keysz, &kk, &ksz);
c = GC_INIT(s->k.cc, kk, ksz);
debug_ge("Z", s->k.g, Z); )
derive(&s->k, R, Z, "cipher", s->k.cc->name, s->k.cc->keysz, &kk, &ksz);
c = GC_INIT(s->k.cc, kk, ksz);