crypto: Avoid memory leak on failure