SR_CRYPTO_KEYBLOCK_BYTES
for (i = 0; i < SR_CRYPTO_KEYBLOCK_BYTES; i += RIJNDAEL128_BLOCK_LEN)
sizeof(kdfinfo->maskkey), kp, SR_CRYPTO_KEYBLOCK_BYTES, digest);
keys = alloc(SR_CRYPTO_KEYBLOCK_BYTES);
bzero(keys, SR_CRYPTO_KEYBLOCK_BYTES);
explicit_bzero(keys, SR_CRYPTO_KEYBLOCK_BYTES);
free(keys, SR_CRYPTO_KEYBLOCK_BYTES);
explicit_bzero(bv->sbv_keys, SR_CRYPTO_KEYBLOCK_BYTES);
free(bv->sbv_keys, SR_CRYPTO_KEYBLOCK_BYTES);