Use _new and _free methods on EVP_CIPHER_CTX

This is more consistent (to the extent consistency is even a thing in OpenSSL) with our EVP_MD_CTX behaviors.