Use a signed value to check return value of do_cipher().