OpenSSL will handle shorter lengths, but the RFC does recommend that the length of the ```key``` be equal to the length of the ```digest_size``` (not actually the ```block_size``` so this should be corrected). I'd prefer to encourage longer length in the docs, so perhaps this?

```
The key should be randomly generated bytes and is recommended to be equal in length to the digest_size of the hash function chosen.
```