Since most of the memory in such
crypto subsystems is dedicated to session contexts,
any such multiplier on the session context size im-
pacts memory cost almost linearly, compared to al-
gorithms that can perform on-the-fly subkey gener-
ation. Thus, such solutions are expensive, not only
in terms of the cost of the memory chips, but also in
pin count (which translates directly to dollars) and
in board area.