reorganize OpenSSL EC backend to remove some unneeded indirection