Source: https://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp2781.pdf