use cryptomilk's kernel