Clean up the tls1_change_cipher_state() key length handling and use a
single variable with a descriptive name, instead of two poorly named
variables.

Largely based on Adam Langley's chromium patches.

ok miod@