when using a block cipher, there are no implicit
IVs derived from the master secret. Note that an overlong key_block_len
would not affect the secret generation (the trailing bytes would
simply be discarded), but we still provide this for completeness.
i