As discussed recently on openssl-users.