much of this taken from the aes implimentation in triplesec which in turn based its implimentation on crypto-js.
EVP_BytesToKey is a strait up port of the same function from openssl as there is literally no documenation on it beyond it using 'undocumented extentions' for longer keys.
