ipsec_get_keylen
int ipsec_get_keylen(u_int, u_int, struct sadb_alg *);
if (ipsec_get_keylen(sup, alg, &alg0)) {