Add a class for aligned buffers

This simplifies the core crypto routines, especially the error handling.  In
fact there was already one error path where we were failing to call free().