Minor nit: I prefer `cipher_ == NULL` checks.