SAE: Use crypto wrappers instead of direct OpenSSL calls