cms_kek_cipher
if (!cms_kek_cipher(&cek, &ceklen, enckey, enckeylen, ri->d.kari, 0))
if (!cms_kek_cipher(&enckey, &enckeylen, ec->key, ec->keylen,