It turned out that OpenSSL prior 0.9.7 can't handle RC4 keys longer than
128 bits correctly. The bug was fixed in Nov 2002, but never made it to
0.9.6 branch. The fix is commited even to 0.9.6-stable, but as
immediately acting relief apply
http://cvs.openssl.org/filediff?f=openssl/crypto/evp/e_rc4.c&v1=1.8&v2=1.8.2.1
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
