Don't call MD5_Update or SHA1_Update with an empty buffer

The MD5 and SHA1 implementations using libcrypto now pass the Go test suites
for them.