reject zero block length in PKCS12 keygen