SHA1BYTES
static const char zero[SHA1BLOCKBYTES - SHA1BYTES] = {0};
SHA1Update(&sha1_context, (unsigned char *)XVAL, SHA1BYTES);
SHA1BLOCKBYTES - SHA1BYTES);
xvalconv(x_j, sha1_context.state, SHA1BYTES/4);
bcopy(tempout, &out[i], min(nbytes - i, SHA1BYTES));
bzero(tempout, SHA1BYTES);
rv = n2rng_getentropy(n2rng, (void *)frsp->XKEY, ROUNDUP(SHA1BYTES, 8));
for (i = 0; i < nbytes; i += SHA1BYTES) {