IV = H[25..24 + n / 2];

PSExp = KExp15(PS, K_EXP_MAC, K_EXP_ENC, IV).