heap versions like all the other crypt calls so it works with static memory. Plays nice with FIPS mode if available.