Yes, that's common.

But the most common bugs have nothing to do with encryption.