crypto_ipsecmb: use pre-expanded keys