Merge pull request #3988 from gilles-peskine-arm/rsa_private-ret-2.16

Backport 2.16: Fix an incorrect error code if RSA private operation glitched