I just found the m2crypto module, which wraps OpenSSL. Unless somebody has a preferable module, I'll just use that.