gcm128.c: fix bug in OPENSSL_SMALL_FOOTPRINT decrypt.