diff -up jss-4.2.6/mozilla/security/jss/org/mozilla/jss/crypto/KeyGenAlgorithm.java.nkinderSaved jss-4.2.6/mozilla/security/jss/org/mozilla/jss/crypto/KeyGenAlgorithm.java

--- jss-4.2.6/mozilla/security/jss/org/mozilla/jss/crypto/KeyGenAlgorithm.java.nkinderSaved	2014-09-26 14:40:03.452845047 -0700

+++ jss-4.2.6/mozilla/security/jss/org/mozilla/jss/crypto/KeyGenAlgorithm.java	2014-09-26 14:41:02.101598146 -0700

@@ -127,7 +127,7 @@ public class KeyGenAlgorithm extends Alg

     RC4 = new KeyGenAlgorithm(CKM_RC4_KEY_GEN, "RC4",

             new KeyStrengthValidator() {

                 public boolean isValidKeyStrength(int strength) {

-                    return true;

+                    return strength>=40 && strength <= (256*8);

                 }

             }, null, null);