siv_aead: create private key copy and implement wiping
siv_aead: create private key copy and implement wiping

Having a private copy relieves the caller from worrying about
whether he can zero his copy. The copy can be cleared by
calling Wipe().

rfjakob/gocryptfs,rfjakob/gocryptfs,rfjakob/gocryptfs,rfjakob/gocryptfs