Improve crypto backends error handling

[qmuntal]

Both the CNG and the OpenSSL backends have important issues with the way they handle errors. We need to fix as a prerequisite to making GOEXPERIMENT=systemcrypto the default behavior.

This is the list of issues:

• golang-fips/openssl#231
• microsoft/go-crypto-winnative#68