openssl plugin can replace random, hmac, and gcm plugins