key_info
encrypt_keyid(struct key_info *kp, unsigned char *keyid, int len)
struct key_info *kp = &ki[(dir == DIR_ENCRYPT) ? 0 : 1];