crypto: use ERR_CAST