encrypt_cpa
encrypt_cpa(out_ciphertext, &pub, entropy, key_and_randomness + 32,
encrypt_cpa(expected_ciphertext, &priv.pub, decrypted,