Source: https://csrc.nist.rip/groups/STM/cmvp/documents/140-1/140sp/140sp2784.pdf