diff --git a/lib/krb5/crypto.c b/lib/krb5/crypto.c
index bb8114110..8e2023485 100644
--- a/lib/krb5/crypto.c
+++ b/lib/krb5/crypto.c
@@ -2254,7 +2254,7 @@ encrypt_internal_derived(krb5_context context,
     
     checksum_sz = CHECKSUMSIZE(et->keyed_checksum);
 
-    sz = et->confoundersize + /* 4 - length */ len;
+    sz = et->confoundersize + len;
     block_sz = (sz + et->blocksize - 1) &~ (et->blocksize - 1); /* pad */
     total_sz = block_sz + checksum_sz;
     p = calloc(1, total_sz);