Source: https://www.openssl.org/news/secadv_20140605.txt