BLAKE2S_KEY_SIZE
KKASSERT(key != NULL && keylen > 0 && keylen <= BLAKE2S_KEY_SIZE);
(key != NULL || keylen == 0) && keylen <= BLAKE2S_KEY_SIZE);
#define COOKIE_KEY_SIZE BLAKE2S_KEY_SIZE