It might be possible for two callers to race the mutex lock after the
NULL ctx check. Instead, move the lock above the check so there isn't
the possibility of leaking a crypto ctx. Additionally, report the full
algo name when failing.
Signed-off-by: Kees Cook <[email protected]>
[tyhicks: remove out label, which is no longer used]
Signed-off-by: Tyler Hicks <[email protected]>