> There are questions regarding error handling, but in principle the
> API should fit?  E.g., libarchive has this for the OpenSSL case:

Yes, apart from that it follows the same init/update/final idiom and
should fit.