Cf. https://www.openwall.com/lists/oss-security/2018/11/27/4 and https://www.openwall.com/lists/oss-security/2018/11/27/5 .