drbg: Don't generate more than 2^16 bytes