Switch ERROR for FAILURE, as it's meant to be the opposite of SUCCESS
Bring comment up to date :-(
Check for correct enum, when s20_returns
Added tests for s20_crypt argument sanity checks
Add sanity check that buf isn't NULL