546     size_t outlen;  in Finish()  local
547     if (EVP_PKEY_encrypt(ctx.get(), nullptr /* out */, &outlen, data_.peek_read(),  in Finish()
551     if (!output->Reinitialize(outlen))  in Finish()
557     if (padding_ == KM_PAD_NONE && to_encrypt_len < outlen) {  in Finish()
558         keymaster_error_t error = zero_pad_left(&zero_padded, outlen, data_);  in Finish()
562         to_encrypt_len = outlen;  in Finish()
565     if (EVP_PKEY_encrypt(ctx.get(), output->peek_write(), &outlen, to_encrypt, to_encrypt_len) <= 0)  in Finish()
567     if (!output->advance_write(outlen))  in Finish()
599     size_t outlen;  in Finish()  local
600     if (EVP_PKEY_decrypt(ctx.get(), nullptr /* out */, &outlen, data_.peek_read(),  in Finish()
604     if (!output->Reinitialize(outlen))  in Finish()
610     if (padding_ == KM_PAD_NONE && to_decrypt_len < outlen) {  in Finish()
611         keymaster_error_t error = zero_pad_left(&zero_padded, outlen, data_);  in Finish()
615         to_decrypt_len = outlen;  in Finish()
618     if (EVP_PKEY_decrypt(ctx.get(), output->peek_write(), &outlen, to_decrypt, to_decrypt_len) <= 0)  in Finish()
620     if (!output->advance_write(outlen))  in Finish()