Merge pull request #673 from gilles-peskine-arm/ctr_drbg-aes_fail-2.7

Backport 2.7: Uncaught AES failure in CTR_DRBG