crypto: fix CipherFinal return value check
crypto: allow setting add'l authenticated data