Don't set ctx->cipher until after a successful fetch