Reported by: Solar Designer of Openwall

Make sure tkeylen is initialised properly when encrypting CMS messages.
diff --git a/CHANGES b/CHANGES
index 33c3060..8425bb3 100644
--- a/CHANGES
+++ b/CHANGES
@@ -291,6 +291,10 @@
 
  
  Changes between 1.0.1b and 1.0.1c [xx XXX xxxx]
+
+  *) Initialise tkeylen properly when encrypting CMS messages.
+     Thanks to Solar Designer of Openwall for reporting this issue.
+     [Steve Henson]
  
   *) In FIPS mode don't try to use composite ciphers as they are not
      approved.