crypto: Fix assertions for digest-only sessions with separate output.

[jhb]

Summary

Digest-only sessions do not generate modified payload as an output, so
don't bother asserting anything about the payload with respect to the
output buffer other than the payload output start being zero.

In addition, a verify request on a digest-only session doesn't
generate any output at all so should never have a separate output
buffer.

PR: 252316
Co-authored-by: Jeremy Faulkner <[e-mail]>