TLS_CBC_IMPLICIT_IV_LEN
if (en->iv_len != TLS_CBC_IMPLICIT_IV_LEN)
uint8_t iv[TLS_CBC_IMPLICIT_IV_LEN];