Thank you for the PR. Do we need to add checks for other calls to the crypto library (e.g., HMAC_Init_ex, EVP_DecryptInit_ex)?

@kazuho we might. The reason i did it for EVP_EncryptInit_ex is that existing code checks for it, and coverity notices that. I think it's good for code quality if checks are done in a consistent manner when possible.