Fix reading broken BER in gcrypt/rsa.c