That's fine, as long as it's documented that "nonce" means "the way OpenSSL wants you to supply it", not "the thing that everyone else calls a nonce when using CTR" :) (I didn't know we were taking over this much of libopenssl's behavior verbatim. Is that intentional?)