SEC: extract the CTR step into a public function, for algorithms that might use it.