nrf_securit: cracen: Fix input validation ordering

AES-CTR should not check for unprocessed_input
as it can handle indivudual blocks smaller than
block size.

Signed-off-by: Dag Erik Gjørvad <dag.erik.gjorvad@nordicsemi.no>

Author: degjorva

subsys/nrf_security/src/drivers/cracen/cracen_sw/src/cracen_sw_cipher.c

@@ -460,17 +460,17 @@ psa_status_t cracen_cipher_update(cracen_cipher_operation_t *operation, const ui
 		return PSA_SUCCESS;
 	}
 
-	if (output == NULL || output_size < input_length + operation->unprocessed_input_bytes) {
-		return PSA_ERROR_BUFFER_TOO_SMALL;
-	}
-
 	if (IS_ENABLED(PSA_NEED_CRACEN_CTR_AES)) {
 		if (operation->alg == PSA_ALG_CTR) {
 			return cracen_sw_aes_ctr_update(operation, input, input_length, output,
 							output_size, output_length);
 		}
 	}
 
+	if (output == NULL || output_size < input_length + operation->unprocessed_input_bytes) {
+		return PSA_ERROR_BUFFER_TOO_SMALL;
+	}
+
 	if (IS_ENABLED(PSA_NEED_CRACEN_CBC_NO_PADDING_AES) ||
 	    IS_ENABLED(PSA_NEED_CRACEN_CBC_PKCS7_AES)) {
 		if (operation->alg == PSA_ALG_CBC_NO_PADDING ||