minicrypt: compute W[i] on-the-fly, reduce storage space