KDF_R_MISSING_SECRET
{ERR_PACK(ERR_LIB_KDF, 0, KDF_R_MISSING_SECRET), "missing secret"},
KDFerror(KDF_R_MISSING_SECRET);