crypto/openssl: support AES-CCM