hash_g
if (!hash_g(hashed, augmented_seed, sizeof(augmented_seed), mdctx, key))
ret = hash_g(Kr, input, sizeof(input), mdctx, key)
if (!hash_g(Kr, decrypted, sizeof(decrypted), mdctx, key)