NONCE_SIZE
uint8_t nonce[NONCE_SIZE]; /* from user */
for (i = 0; i < NONCE_SIZE; i++)
memcpy(&data.block[sizeof(data.counter)], ctx->nonce, NONCE_SIZE);