Maybe modify the XORing functions to take a &mut [u8; 32] instead of returning a [u8; 32] and deref mut on a secret.