512 /* private cipher state */