KDF_R_INVALID_DIGEST
{ERR_PACK(ERR_LIB_KDF, 0, KDF_R_INVALID_DIGEST), "invalid digest"},
KDFerror(KDF_R_INVALID_DIGEST);