S_RX_BADCIPHER
#define S_RX_NOCIPHERCTX AFTER(S_RX_BADCIPHER)
case S_RX_BADCIPHER: STAT(rx_badcipher);