The encryptor and decryptor state machines share code around how they manage keys.  Factor this code out into one shared API so that drivers can use the same logic for key management with either encryption or decryption.