I found out the hard way that this error is also caused by cryptodev when it is being used by hostapd/wpad via OpenSSL or other library with cryptodev support.
In case of OpenSSL, open /etc/ssl/modules.cnf.d/devcrypto.cnf and check that DIGESTS = NONE.
There is a warning in the comment, but I thought that an error here and there won't hurt; it would just retry the auth. The warning didn't say cryptodev gets permently corrupted.