Relevant thread on oss-security: http://www.openwall.com/lists/oss-security/2016/02/17/9 -- Jakub Wilk