diff --git a/lib/gssapi/arcfour.c b/lib/gssapi/arcfour.c
index 6b9149d45..2c2f012df 100644
--- a/lib/gssapi/arcfour.c
+++ b/lib/gssapi/arcfour.c
@@ -345,8 +345,8 @@ _gssapi_wrap_arcfour(OM_uint32 * minor_status,
 	*conf_state = 0;
 
     datalen = input_message_buffer->length + 1 /* padding */;
-    len = datalen + GSS_ARCFOUR_WRAP_TOKEN_SIZE - 2;  /* encap_length adds 2 */
-    _gssapi_encap_length(len, &len, &total_len, GSS_KRB5_MECHANISM);
+    len = datalen + GSS_ARCFOUR_WRAP_TOKEN_SIZE;
+     _gssapi_encap_length(len, &len, &total_len, GSS_KRB5_MECHANISM);
 
     output_message_buffer->length = total_len;
     output_message_buffer->value  = malloc (total_len);
diff --git a/lib/gssapi/krb5/arcfour.c b/lib/gssapi/krb5/arcfour.c
index 6b9149d45..2c2f012df 100644
--- a/lib/gssapi/krb5/arcfour.c
+++ b/lib/gssapi/krb5/arcfour.c
@@ -345,8 +345,8 @@ _gssapi_wrap_arcfour(OM_uint32 * minor_status,
 	*conf_state = 0;
 
     datalen = input_message_buffer->length + 1 /* padding */;
-    len = datalen + GSS_ARCFOUR_WRAP_TOKEN_SIZE - 2;  /* encap_length adds 2 */
-    _gssapi_encap_length(len, &len, &total_len, GSS_KRB5_MECHANISM);
+    len = datalen + GSS_ARCFOUR_WRAP_TOKEN_SIZE;
+     _gssapi_encap_length(len, &len, &total_len, GSS_KRB5_MECHANISM);
 
     output_message_buffer->length = total_len;
     output_message_buffer->value  = malloc (total_len);