GCM cipher in provider now fails if passed bad keylength