The stream API requires that first the cipher operation type is set with the init call, followed by an arbitrary number and mix of the update and op calls.