make sure keylen is a multiple of 2