num is an unsigned long, but since it was transfered from

crypto/sha/sha_locl.h, where it is in fact an int, we need to check
for less-than-zero as if it was an int...