Security Fix: Fixed length-extension exploit on key exchange

A possible length-extension attack could be executed on the key
exchange operation. The security fix corrected the flaw by using
a proper HMAC method.