Actually the key can be 40 to 128 bits in multiples of 4 according to the
specification, but supporting arbitrary key length hits performance (and
need for that should be extremely rare).
Note: Self-test vector is a mockup but the format was first tested using a
real document hash.
