Add basic sanity checks for the key in encrypt/decrypt.
Make it more obvious how verifyMFormat in the reference code is broken.