key expansion not exact as spec, check pg 11