GH-455: ensure BaseCipher.update() fulfills the contract

GH-455: ensure BaseCipher.update() fulfills the contract #77