fn split_to_subkeys(key: &[u8; 64]) -> (&[u8; 32], &[u8; 32])
Splits the 64-byte composite key into zero-copy views over its encryption and MAC halves.